Jul 10 00:45:11.842206 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 10 00:45:11.842226 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Wed Jul 9 23:19:15 -00 2025 Jul 10 00:45:11.842234 kernel: efi: EFI v2.70 by EDK II Jul 10 00:45:11.842240 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 10 00:45:11.842245 kernel: random: crng init done Jul 10 00:45:11.842251 kernel: ACPI: Early table checksum verification disabled Jul 10 00:45:11.842258 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 10 00:45:11.842265 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 10 00:45:11.842271 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842276 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842282 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842287 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842293 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842298 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842306 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842312 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842318 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:45:11.842324 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 10 00:45:11.842329 kernel: NUMA: Failed to initialise from firmware Jul 10 00:45:11.842335 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:45:11.842341 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Jul 10 00:45:11.842347 kernel: Zone ranges: Jul 10 00:45:11.842352 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:45:11.842371 kernel: DMA32 empty Jul 10 00:45:11.842377 kernel: Normal empty Jul 10 00:45:11.842386 kernel: Movable zone start for each node Jul 10 00:45:11.842392 kernel: Early memory node ranges Jul 10 00:45:11.842398 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 10 00:45:11.842403 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 10 00:45:11.842409 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 10 00:45:11.842415 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 10 00:45:11.842421 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 10 00:45:11.842427 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 10 00:45:11.842433 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 10 00:45:11.842439 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:45:11.842446 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 10 00:45:11.842452 kernel: psci: probing for conduit method from ACPI. Jul 10 00:45:11.842458 kernel: psci: PSCIv1.1 detected in firmware. Jul 10 00:45:11.842464 kernel: psci: Using standard PSCI v0.2 function IDs Jul 10 00:45:11.842470 kernel: psci: Trusted OS migration not required Jul 10 00:45:11.842478 kernel: psci: SMC Calling Convention v1.1 Jul 10 00:45:11.842485 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 10 00:45:11.842492 kernel: ACPI: SRAT not present Jul 10 00:45:11.842499 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 10 00:45:11.842505 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 10 00:45:11.842511 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 10 00:45:11.842517 kernel: Detected PIPT I-cache on CPU0 Jul 10 00:45:11.842523 kernel: CPU features: detected: GIC system register CPU interface Jul 10 00:45:11.842530 kernel: CPU features: detected: Hardware dirty bit management Jul 10 00:45:11.842536 kernel: CPU features: detected: Spectre-v4 Jul 10 00:45:11.842542 kernel: CPU features: detected: Spectre-BHB Jul 10 00:45:11.842549 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 10 00:45:11.842555 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 10 00:45:11.842561 kernel: CPU features: detected: ARM erratum 1418040 Jul 10 00:45:11.842567 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 10 00:45:11.842573 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 10 00:45:11.842579 kernel: Policy zone: DMA Jul 10 00:45:11.842586 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=97626bbec4e8c603c151f40dbbae5fabba3cda417023e06335ea30183b36a27f Jul 10 00:45:11.842593 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:45:11.842599 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:45:11.842605 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:45:11.842611 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:45:11.842619 kernel: Memory: 2457332K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114956K reserved, 0K cma-reserved) Jul 10 00:45:11.842625 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:45:11.842631 kernel: trace event string verifier disabled Jul 10 00:45:11.842637 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 10 00:45:11.842644 kernel: rcu: RCU event tracing is enabled. Jul 10 00:45:11.842650 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:45:11.842656 kernel: Trampoline variant of Tasks RCU enabled. Jul 10 00:45:11.842662 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:45:11.842668 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:45:11.842674 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:45:11.842680 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 10 00:45:11.842687 kernel: GICv3: 256 SPIs implemented Jul 10 00:45:11.842693 kernel: GICv3: 0 Extended SPIs implemented Jul 10 00:45:11.842699 kernel: GICv3: Distributor has no Range Selector support Jul 10 00:45:11.842705 kernel: Root IRQ handler: gic_handle_irq Jul 10 00:45:11.842711 kernel: GICv3: 16 PPIs implemented Jul 10 00:45:11.842717 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 10 00:45:11.842723 kernel: ACPI: SRAT not present Jul 10 00:45:11.842729 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 10 00:45:11.842735 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 10 00:45:11.842742 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 10 00:45:11.842748 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 10 00:45:11.842755 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 10 00:45:11.842762 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:45:11.842769 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 10 00:45:11.842775 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 10 00:45:11.842781 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 10 00:45:11.842787 kernel: arm-pv: using stolen time PV Jul 10 00:45:11.842794 kernel: Console: colour dummy device 80x25 Jul 10 00:45:11.842801 kernel: ACPI: Core revision 20210730 Jul 10 00:45:11.842807 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 10 00:45:11.842814 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:45:11.842820 kernel: LSM: Security Framework initializing Jul 10 00:45:11.842827 kernel: SELinux: Initializing. Jul 10 00:45:11.842834 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:45:11.842840 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:45:11.842846 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:45:11.842852 kernel: Platform MSI: ITS@0x8080000 domain created Jul 10 00:45:11.842858 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 10 00:45:11.842865 kernel: Remapping and enabling EFI services. Jul 10 00:45:11.842871 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:45:11.842877 kernel: Detected PIPT I-cache on CPU1 Jul 10 00:45:11.842885 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 10 00:45:11.842891 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 10 00:45:11.842897 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:45:11.842903 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 10 00:45:11.842909 kernel: Detected PIPT I-cache on CPU2 Jul 10 00:45:11.842916 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 10 00:45:11.842922 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 10 00:45:11.842928 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:45:11.842935 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 10 00:45:11.842941 kernel: Detected PIPT I-cache on CPU3 Jul 10 00:45:11.842948 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 10 00:45:11.842954 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 10 00:45:11.842961 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:45:11.842967 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 10 00:45:11.842978 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:45:11.842985 kernel: SMP: Total of 4 processors activated. Jul 10 00:45:11.842992 kernel: CPU features: detected: 32-bit EL0 Support Jul 10 00:45:11.842999 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 10 00:45:11.843005 kernel: CPU features: detected: Common not Private translations Jul 10 00:45:11.843012 kernel: CPU features: detected: CRC32 instructions Jul 10 00:45:11.843018 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 10 00:45:11.843025 kernel: CPU features: detected: LSE atomic instructions Jul 10 00:45:11.843033 kernel: CPU features: detected: Privileged Access Never Jul 10 00:45:11.843039 kernel: CPU features: detected: RAS Extension Support Jul 10 00:45:11.843046 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 10 00:45:11.843052 kernel: CPU: All CPU(s) started at EL1 Jul 10 00:45:11.843059 kernel: alternatives: patching kernel code Jul 10 00:45:11.843067 kernel: devtmpfs: initialized Jul 10 00:45:11.843073 kernel: KASLR enabled Jul 10 00:45:11.843080 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:45:11.843086 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:45:11.843093 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:45:11.843099 kernel: SMBIOS 3.0.0 present. Jul 10 00:45:11.843106 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 10 00:45:11.843118 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:45:11.843126 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 10 00:45:11.843134 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 10 00:45:11.843141 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 10 00:45:11.843148 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:45:11.843155 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Jul 10 00:45:11.843161 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:45:11.843168 kernel: cpuidle: using governor menu Jul 10 00:45:11.843175 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 10 00:45:11.843181 kernel: ASID allocator initialised with 32768 entries Jul 10 00:45:11.843187 kernel: ACPI: bus type PCI registered Jul 10 00:45:11.843195 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:45:11.843201 kernel: Serial: AMBA PL011 UART driver Jul 10 00:45:11.843208 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:45:11.843215 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 10 00:45:11.843221 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:45:11.843228 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 10 00:45:11.843234 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:45:11.843241 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 10 00:45:11.843247 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:45:11.843255 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:45:11.843261 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:45:11.843268 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:45:11.843274 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:45:11.843281 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:45:11.843288 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:45:11.843294 kernel: ACPI: Interpreter enabled Jul 10 00:45:11.843301 kernel: ACPI: Using GIC for interrupt routing Jul 10 00:45:11.843307 kernel: ACPI: MCFG table detected, 1 entries Jul 10 00:45:11.843315 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 10 00:45:11.843321 kernel: printk: console [ttyAMA0] enabled Jul 10 00:45:11.843328 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:45:11.843496 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:45:11.843560 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 10 00:45:11.843618 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 10 00:45:11.843674 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 10 00:45:11.843734 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 10 00:45:11.843743 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 10 00:45:11.843750 kernel: PCI host bridge to bus 0000:00 Jul 10 00:45:11.843817 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 10 00:45:11.843871 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 10 00:45:11.843923 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 10 00:45:11.843978 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:45:11.844052 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 10 00:45:11.844182 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:45:11.844254 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 10 00:45:11.844320 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 10 00:45:11.844419 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 10 00:45:11.844488 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 10 00:45:11.844552 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 10 00:45:11.844621 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 10 00:45:11.844681 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 10 00:45:11.844738 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 10 00:45:11.844796 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 10 00:45:11.844805 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 10 00:45:11.844812 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 10 00:45:11.844818 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 10 00:45:11.844825 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 10 00:45:11.844833 kernel: iommu: Default domain type: Translated Jul 10 00:45:11.844840 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 10 00:45:11.844846 kernel: vgaarb: loaded Jul 10 00:45:11.844853 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:45:11.844859 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:45:11.844866 kernel: PTP clock support registered Jul 10 00:45:11.844872 kernel: Registered efivars operations Jul 10 00:45:11.844879 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 10 00:45:11.844885 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:45:11.844893 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:45:11.844900 kernel: pnp: PnP ACPI init Jul 10 00:45:11.844969 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 10 00:45:11.844979 kernel: pnp: PnP ACPI: found 1 devices Jul 10 00:45:11.844985 kernel: NET: Registered PF_INET protocol family Jul 10 00:45:11.844992 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:45:11.844999 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:45:11.845006 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:45:11.845014 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:45:11.845021 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:45:11.845028 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:45:11.845034 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:45:11.845041 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:45:11.845048 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:45:11.845054 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:45:11.845061 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 10 00:45:11.845067 kernel: kvm [1]: HYP mode not available Jul 10 00:45:11.845075 kernel: Initialise system trusted keyrings Jul 10 00:45:11.845081 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:45:11.845088 kernel: Key type asymmetric registered Jul 10 00:45:11.845094 kernel: Asymmetric key parser 'x509' registered Jul 10 00:45:11.845101 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:45:11.845107 kernel: io scheduler mq-deadline registered Jul 10 00:45:11.845121 kernel: io scheduler kyber registered Jul 10 00:45:11.845129 kernel: io scheduler bfq registered Jul 10 00:45:11.845136 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 10 00:45:11.845144 kernel: ACPI: button: Power Button [PWRB] Jul 10 00:45:11.845151 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 10 00:45:11.845221 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 10 00:45:11.845231 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:45:11.845238 kernel: thunder_xcv, ver 1.0 Jul 10 00:45:11.845244 kernel: thunder_bgx, ver 1.0 Jul 10 00:45:11.845251 kernel: nicpf, ver 1.0 Jul 10 00:45:11.845257 kernel: nicvf, ver 1.0 Jul 10 00:45:11.845333 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 10 00:45:11.845410 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-10T00:45:11 UTC (1752108311) Jul 10 00:45:11.845420 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 10 00:45:11.845426 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:45:11.845433 kernel: Segment Routing with IPv6 Jul 10 00:45:11.845440 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:45:11.845446 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:45:11.845453 kernel: Key type dns_resolver registered Jul 10 00:45:11.845460 kernel: registered taskstats version 1 Jul 10 00:45:11.845468 kernel: Loading compiled-in X.509 certificates Jul 10 00:45:11.845475 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 9e274a0dc4fc3d34232d90d226b034c4fe0e3e22' Jul 10 00:45:11.845482 kernel: Key type .fscrypt registered Jul 10 00:45:11.845488 kernel: Key type fscrypt-provisioning registered Jul 10 00:45:11.845495 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:45:11.845502 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:45:11.845509 kernel: ima: No architecture policies found Jul 10 00:45:11.845515 kernel: clk: Disabling unused clocks Jul 10 00:45:11.845522 kernel: Freeing unused kernel memory: 36416K Jul 10 00:45:11.845530 kernel: Run /init as init process Jul 10 00:45:11.845536 kernel: with arguments: Jul 10 00:45:11.845543 kernel: /init Jul 10 00:45:11.845549 kernel: with environment: Jul 10 00:45:11.845555 kernel: HOME=/ Jul 10 00:45:11.845562 kernel: TERM=linux Jul 10 00:45:11.845569 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:45:11.845577 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:45:11.845587 systemd[1]: Detected virtualization kvm. Jul 10 00:45:11.845594 systemd[1]: Detected architecture arm64. Jul 10 00:45:11.845600 systemd[1]: Running in initrd. Jul 10 00:45:11.845607 systemd[1]: No hostname configured, using default hostname. Jul 10 00:45:11.845614 systemd[1]: Hostname set to . Jul 10 00:45:11.845621 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:45:11.845628 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:45:11.845635 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:45:11.845643 systemd[1]: Reached target cryptsetup.target. Jul 10 00:45:11.845650 systemd[1]: Reached target paths.target. Jul 10 00:45:11.845656 systemd[1]: Reached target slices.target. Jul 10 00:45:11.845663 systemd[1]: Reached target swap.target. Jul 10 00:45:11.845670 systemd[1]: Reached target timers.target. Jul 10 00:45:11.845677 systemd[1]: Listening on iscsid.socket. Jul 10 00:45:11.845683 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:45:11.845692 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:45:11.845699 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:45:11.845706 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:45:11.845713 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:45:11.845720 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:45:11.845727 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:45:11.845733 systemd[1]: Reached target sockets.target. Jul 10 00:45:11.845740 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:45:11.845747 systemd[1]: Finished network-cleanup.service. Jul 10 00:45:11.845756 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:45:11.845763 systemd[1]: Starting systemd-journald.service... Jul 10 00:45:11.845770 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:45:11.845777 systemd[1]: Starting systemd-resolved.service... Jul 10 00:45:11.845784 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:45:11.845791 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:45:11.845797 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:45:11.845804 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:45:11.845811 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:45:11.845820 kernel: audit: type=1130 audit(1752108311.843:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.845830 systemd-journald[290]: Journal started Jul 10 00:45:11.845868 systemd-journald[290]: Runtime Journal (/run/log/journal/07a08bf675954d5fb71820ac0398df8f) is 6.0M, max 48.7M, 42.6M free. Jul 10 00:45:11.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.836605 systemd-modules-load[291]: Inserted module 'overlay' Jul 10 00:45:11.848111 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:45:11.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.852855 systemd[1]: Started systemd-journald.service. Jul 10 00:45:11.852879 kernel: audit: type=1130 audit(1752108311.848:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.855346 kernel: audit: type=1130 audit(1752108311.852:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.853774 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:45:11.859371 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:45:11.863393 kernel: Bridge firewalling registered Jul 10 00:45:11.863394 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 10 00:45:11.871284 systemd-resolved[292]: Positive Trust Anchors: Jul 10 00:45:11.871296 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:45:11.871324 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:45:11.882200 kernel: SCSI subsystem initialized Jul 10 00:45:11.882220 kernel: audit: type=1130 audit(1752108311.873:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.872569 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:45:11.875164 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:45:11.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.887369 kernel: audit: type=1130 audit(1752108311.883:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.876123 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 10 00:45:11.882992 systemd[1]: Started systemd-resolved.service. Jul 10 00:45:11.891875 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:45:11.891893 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:45:11.891902 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:45:11.884373 systemd[1]: Reached target nss-lookup.target. Jul 10 00:45:11.893836 dracut-cmdline[309]: dracut-dracut-053 Jul 10 00:45:11.894869 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=97626bbec4e8c603c151f40dbbae5fabba3cda417023e06335ea30183b36a27f Jul 10 00:45:11.895110 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 10 00:45:11.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.895885 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:45:11.904298 kernel: audit: type=1130 audit(1752108311.899:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.900520 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:45:11.909669 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:45:11.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.914391 kernel: audit: type=1130 audit(1752108311.910:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.960383 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:45:11.972401 kernel: iscsi: registered transport (tcp) Jul 10 00:45:11.988380 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:45:11.988412 kernel: QLogic iSCSI HBA Driver Jul 10 00:45:12.021591 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:45:12.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.023290 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:45:12.026825 kernel: audit: type=1130 audit(1752108312.022:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.068382 kernel: raid6: neonx8 gen() 13763 MB/s Jul 10 00:45:12.085373 kernel: raid6: neonx8 xor() 10795 MB/s Jul 10 00:45:12.102603 kernel: raid6: neonx4 gen() 13557 MB/s Jul 10 00:45:12.119377 kernel: raid6: neonx4 xor() 11208 MB/s Jul 10 00:45:12.136370 kernel: raid6: neonx2 gen() 13098 MB/s Jul 10 00:45:12.153373 kernel: raid6: neonx2 xor() 10290 MB/s Jul 10 00:45:12.170380 kernel: raid6: neonx1 gen() 10602 MB/s Jul 10 00:45:12.187375 kernel: raid6: neonx1 xor() 8800 MB/s Jul 10 00:45:12.204379 kernel: raid6: int64x8 gen() 6265 MB/s Jul 10 00:45:12.221377 kernel: raid6: int64x8 xor() 3537 MB/s Jul 10 00:45:12.238383 kernel: raid6: int64x4 gen() 7209 MB/s Jul 10 00:45:12.255374 kernel: raid6: int64x4 xor() 3848 MB/s Jul 10 00:45:12.272375 kernel: raid6: int64x2 gen() 6149 MB/s Jul 10 00:45:12.289381 kernel: raid6: int64x2 xor() 3318 MB/s Jul 10 00:45:12.306378 kernel: raid6: int64x1 gen() 5031 MB/s Jul 10 00:45:12.323496 kernel: raid6: int64x1 xor() 2644 MB/s Jul 10 00:45:12.323512 kernel: raid6: using algorithm neonx8 gen() 13763 MB/s Jul 10 00:45:12.323522 kernel: raid6: .... xor() 10795 MB/s, rmw enabled Jul 10 00:45:12.324570 kernel: raid6: using neon recovery algorithm Jul 10 00:45:12.335376 kernel: xor: measuring software checksum speed Jul 10 00:45:12.335394 kernel: 8regs : 17224 MB/sec Jul 10 00:45:12.335402 kernel: 32regs : 20697 MB/sec Jul 10 00:45:12.336470 kernel: arm64_neon : 27589 MB/sec Jul 10 00:45:12.336482 kernel: xor: using function: arm64_neon (27589 MB/sec) Jul 10 00:45:12.397383 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 10 00:45:12.407349 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:45:12.411435 kernel: audit: type=1130 audit(1752108312.407:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.410000 audit: BPF prog-id=7 op=LOAD Jul 10 00:45:12.411000 audit: BPF prog-id=8 op=LOAD Jul 10 00:45:12.411818 systemd[1]: Starting systemd-udevd.service... Jul 10 00:45:12.431435 systemd-udevd[492]: Using default interface naming scheme 'v252'. Jul 10 00:45:12.434881 systemd[1]: Started systemd-udevd.service. Jul 10 00:45:12.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.437914 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:45:12.451252 dracut-pre-trigger[500]: rd.md=0: removing MD RAID activation Jul 10 00:45:12.479199 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:45:12.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.480901 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:45:12.513810 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:45:12.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:12.546188 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:45:12.551564 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:45:12.551582 kernel: GPT:9289727 != 19775487 Jul 10 00:45:12.551591 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:45:12.551599 kernel: GPT:9289727 != 19775487 Jul 10 00:45:12.551607 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:45:12.551615 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:45:12.564873 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:45:12.568381 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (549) Jul 10 00:45:12.569600 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:45:12.578448 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:45:12.579548 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:45:12.584723 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:45:12.586597 systemd[1]: Starting disk-uuid.service... Jul 10 00:45:12.592972 disk-uuid[562]: Primary Header is updated. Jul 10 00:45:12.592972 disk-uuid[562]: Secondary Entries is updated. Jul 10 00:45:12.592972 disk-uuid[562]: Secondary Header is updated. Jul 10 00:45:12.596321 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:45:13.607839 disk-uuid[563]: The operation has completed successfully. Jul 10 00:45:13.609115 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:45:13.631224 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:45:13.632447 systemd[1]: Finished disk-uuid.service. Jul 10 00:45:13.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.635091 systemd[1]: Starting verity-setup.service... Jul 10 00:45:13.650402 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 10 00:45:13.673266 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:45:13.675506 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:45:13.677351 systemd[1]: Finished verity-setup.service. Jul 10 00:45:13.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.724032 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:45:13.725407 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:45:13.724925 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:45:13.725659 systemd[1]: Starting ignition-setup.service... Jul 10 00:45:13.727890 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:45:13.733919 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 10 00:45:13.733953 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:45:13.733963 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:45:13.741981 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:45:13.748345 systemd[1]: Finished ignition-setup.service. Jul 10 00:45:13.749890 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:45:13.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.814467 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:45:13.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.815000 audit: BPF prog-id=9 op=LOAD Jul 10 00:45:13.816750 systemd[1]: Starting systemd-networkd.service... Jul 10 00:45:13.829477 ignition[649]: Ignition 2.14.0 Jul 10 00:45:13.829488 ignition[649]: Stage: fetch-offline Jul 10 00:45:13.829537 ignition[649]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:45:13.829547 ignition[649]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:45:13.829684 ignition[649]: parsed url from cmdline: "" Jul 10 00:45:13.829687 ignition[649]: no config URL provided Jul 10 00:45:13.829692 ignition[649]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:45:13.829699 ignition[649]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:45:13.829718 ignition[649]: op(1): [started] loading QEMU firmware config module Jul 10 00:45:13.829723 ignition[649]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:45:13.833553 ignition[649]: op(1): [finished] loading QEMU firmware config module Jul 10 00:45:13.842674 systemd-networkd[740]: lo: Link UP Jul 10 00:45:13.842688 systemd-networkd[740]: lo: Gained carrier Jul 10 00:45:13.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.843072 systemd-networkd[740]: Enumeration completed Jul 10 00:45:13.843154 systemd[1]: Started systemd-networkd.service. Jul 10 00:45:13.843261 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:45:13.844392 systemd-networkd[740]: eth0: Link UP Jul 10 00:45:13.844395 systemd-networkd[740]: eth0: Gained carrier Jul 10 00:45:13.844581 systemd[1]: Reached target network.target. Jul 10 00:45:13.846030 systemd[1]: Starting iscsiuio.service... Jul 10 00:45:13.856689 systemd[1]: Started iscsiuio.service. Jul 10 00:45:13.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.858245 systemd[1]: Starting iscsid.service... Jul 10 00:45:13.861414 iscsid[747]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:45:13.861414 iscsid[747]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:45:13.861414 iscsid[747]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:45:13.861414 iscsid[747]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:45:13.861414 iscsid[747]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:45:13.861414 iscsid[747]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:45:13.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.861425 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.129/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:45:13.864280 systemd[1]: Started iscsid.service. Jul 10 00:45:13.870249 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:45:13.880097 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:45:13.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.881113 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:45:13.882540 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:45:13.884109 systemd[1]: Reached target remote-fs.target. Jul 10 00:45:13.886282 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:45:13.893558 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:45:13.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.902990 ignition[649]: parsing config with SHA512: f3329923491bff5050e65ca1ad196e70500a45b7c376020b95081b3d34dea260bbca2f2315c8b3c198d22016c78a776f7abf5fc92e5bbbe745078241ad48d1cf Jul 10 00:45:13.909579 unknown[649]: fetched base config from "system" Jul 10 00:45:13.909592 unknown[649]: fetched user config from "qemu" Jul 10 00:45:13.910130 ignition[649]: fetch-offline: fetch-offline passed Jul 10 00:45:13.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.911439 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:45:13.910203 ignition[649]: Ignition finished successfully Jul 10 00:45:13.912959 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:45:13.913666 systemd[1]: Starting ignition-kargs.service... Jul 10 00:45:13.922073 ignition[761]: Ignition 2.14.0 Jul 10 00:45:13.922084 ignition[761]: Stage: kargs Jul 10 00:45:13.922203 ignition[761]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:45:13.922213 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:45:13.924460 systemd[1]: Finished ignition-kargs.service. Jul 10 00:45:13.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.922999 ignition[761]: kargs: kargs passed Jul 10 00:45:13.923036 ignition[761]: Ignition finished successfully Jul 10 00:45:13.926867 systemd[1]: Starting ignition-disks.service... Jul 10 00:45:13.932770 ignition[767]: Ignition 2.14.0 Jul 10 00:45:13.932779 ignition[767]: Stage: disks Jul 10 00:45:13.932862 ignition[767]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:45:13.934761 systemd[1]: Finished ignition-disks.service. Jul 10 00:45:13.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.932872 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:45:13.936350 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:45:13.933757 ignition[767]: disks: disks passed Jul 10 00:45:13.937662 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:45:13.933797 ignition[767]: Ignition finished successfully Jul 10 00:45:13.939283 systemd[1]: Reached target local-fs.target. Jul 10 00:45:13.940650 systemd[1]: Reached target sysinit.target. Jul 10 00:45:13.941823 systemd[1]: Reached target basic.target. Jul 10 00:45:13.943879 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:45:13.954401 systemd-fsck[775]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 10 00:45:13.958299 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:45:13.960075 systemd[1]: Mounting sysroot.mount... Jul 10 00:45:13.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:13.966369 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:45:13.966610 systemd[1]: Mounted sysroot.mount. Jul 10 00:45:13.967331 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:45:13.969500 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:45:13.970338 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:45:13.970389 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:45:13.970411 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:45:13.972171 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:45:13.973947 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:45:13.978243 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:45:13.982583 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:45:13.986458 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:45:13.990182 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:45:14.015400 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:45:14.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:14.016947 systemd[1]: Starting ignition-mount.service... Jul 10 00:45:14.018265 systemd[1]: Starting sysroot-boot.service... Jul 10 00:45:14.022968 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:45:14.031537 ignition[828]: INFO : Ignition 2.14.0 Jul 10 00:45:14.031537 ignition[828]: INFO : Stage: mount Jul 10 00:45:14.033909 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:45:14.033909 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:45:14.033909 ignition[828]: INFO : mount: mount passed Jul 10 00:45:14.033909 ignition[828]: INFO : Ignition finished successfully Jul 10 00:45:14.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:14.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:14.033531 systemd[1]: Finished sysroot-boot.service. Jul 10 00:45:14.034803 systemd[1]: Finished ignition-mount.service. Jul 10 00:45:14.683835 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:45:14.691381 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (837) Jul 10 00:45:14.691415 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 10 00:45:14.693038 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:45:14.693059 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:45:14.698181 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:45:14.699885 systemd[1]: Starting ignition-files.service... Jul 10 00:45:14.714130 ignition[857]: INFO : Ignition 2.14.0 Jul 10 00:45:14.714130 ignition[857]: INFO : Stage: files Jul 10 00:45:14.716001 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:45:14.716001 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:45:14.716001 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:45:14.719997 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:45:14.719997 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:45:14.724317 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:45:14.724317 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:45:14.727051 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:45:14.727051 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 10 00:45:14.727051 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Jul 10 00:45:14.725317 unknown[857]: wrote ssh authorized keys file for user: core Jul 10 00:45:14.810692 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:45:14.925979 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 10 00:45:14.925979 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 10 00:45:14.929727 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Jul 10 00:45:15.498466 systemd-networkd[740]: eth0: Gained IPv6LL Jul 10 00:45:15.534618 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:45:15.978819 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 10 00:45:15.978819 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:45:15.982995 ignition[857]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:45:16.006843 ignition[857]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:45:16.008573 ignition[857]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:45:16.008573 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:45:16.008573 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:45:16.008573 ignition[857]: INFO : files: files passed Jul 10 00:45:16.008573 ignition[857]: INFO : Ignition finished successfully Jul 10 00:45:16.025986 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 10 00:45:16.026009 kernel: audit: type=1130 audit(1752108316.008:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.026021 kernel: audit: type=1130 audit(1752108316.020:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.026030 kernel: audit: type=1131 audit(1752108316.020:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.008250 systemd[1]: Finished ignition-files.service. Jul 10 00:45:16.029995 kernel: audit: type=1130 audit(1752108316.026:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.010089 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:45:16.014729 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:45:16.034042 initrd-setup-root-after-ignition[882]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:45:16.015563 systemd[1]: Starting ignition-quench.service... Jul 10 00:45:16.036475 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:45:16.017975 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:45:16.018068 systemd[1]: Finished ignition-quench.service. Jul 10 00:45:16.022454 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:45:16.026943 systemd[1]: Reached target ignition-complete.target. Jul 10 00:45:16.031496 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:45:16.043696 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:45:16.043787 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:45:16.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.045530 systemd[1]: Reached target initrd-fs.target. Jul 10 00:45:16.052126 kernel: audit: type=1130 audit(1752108316.044:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.052148 kernel: audit: type=1131 audit(1752108316.045:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.051510 systemd[1]: Reached target initrd.target. Jul 10 00:45:16.052821 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:45:16.053565 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:45:16.063760 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:45:16.065296 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:45:16.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.069379 kernel: audit: type=1130 audit(1752108316.064:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.073509 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:45:16.074396 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:45:16.075875 systemd[1]: Stopped target timers.target. Jul 10 00:45:16.077213 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:45:16.077315 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:45:16.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.078611 systemd[1]: Stopped target initrd.target. Jul 10 00:45:16.083600 kernel: audit: type=1131 audit(1752108316.078:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.080018 systemd[1]: Stopped target basic.target. Jul 10 00:45:16.084324 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:45:16.085643 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:45:16.087099 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:45:16.088606 systemd[1]: Stopped target remote-fs.target. Jul 10 00:45:16.090029 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:45:16.091456 systemd[1]: Stopped target sysinit.target. Jul 10 00:45:16.092804 systemd[1]: Stopped target local-fs.target. Jul 10 00:45:16.094097 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:45:16.095511 systemd[1]: Stopped target swap.target. Jul 10 00:45:16.096749 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:45:16.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.096859 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:45:16.102401 kernel: audit: type=1131 audit(1752108316.097:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.099564 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:45:16.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.101834 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:45:16.107832 kernel: audit: type=1131 audit(1752108316.102:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.101934 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:45:16.103248 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:45:16.103348 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:45:16.107123 systemd[1]: Stopped target paths.target. Jul 10 00:45:16.108583 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:45:16.112393 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:45:16.113675 systemd[1]: Stopped target slices.target. Jul 10 00:45:16.115066 systemd[1]: Stopped target sockets.target. Jul 10 00:45:16.116318 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:45:16.116422 systemd[1]: Closed iscsid.socket. Jul 10 00:45:16.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.117528 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:45:16.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.117626 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:45:16.119102 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:45:16.119197 systemd[1]: Stopped ignition-files.service. Jul 10 00:45:16.121138 systemd[1]: Stopping ignition-mount.service... Jul 10 00:45:16.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.128145 ignition[897]: INFO : Ignition 2.14.0 Jul 10 00:45:16.128145 ignition[897]: INFO : Stage: umount Jul 10 00:45:16.128145 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:45:16.128145 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:45:16.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.122007 systemd[1]: Stopping iscsiuio.service... Jul 10 00:45:16.134577 ignition[897]: INFO : umount: umount passed Jul 10 00:45:16.134577 ignition[897]: INFO : Ignition finished successfully Jul 10 00:45:16.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.123973 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:45:16.124114 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:45:16.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.126246 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:45:16.128705 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:45:16.128876 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:45:16.130215 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:45:16.130368 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:45:16.134340 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:45:16.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.134441 systemd[1]: Stopped iscsiuio.service. Jul 10 00:45:16.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.136581 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:45:16.137148 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:45:16.137226 systemd[1]: Stopped ignition-mount.service. Jul 10 00:45:16.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.140337 systemd[1]: Stopped target network.target. Jul 10 00:45:16.141797 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:45:16.141832 systemd[1]: Closed iscsiuio.socket. Jul 10 00:45:16.143080 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:45:16.143137 systemd[1]: Stopped ignition-disks.service. Jul 10 00:45:16.144719 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:45:16.144760 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:45:16.146170 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:45:16.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.146209 systemd[1]: Stopped ignition-setup.service. Jul 10 00:45:16.147731 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:45:16.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.148972 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:45:16.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.150766 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:45:16.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.150855 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:45:16.156404 systemd-networkd[740]: eth0: DHCPv6 lease lost Jul 10 00:45:16.172000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:45:16.158109 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:45:16.158202 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:45:16.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.161688 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:45:16.161713 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:45:16.163669 systemd[1]: Stopping network-cleanup.service... Jul 10 00:45:16.164596 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:45:16.164777 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:45:16.166160 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:45:16.166199 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:45:16.168240 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:45:16.168279 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:45:16.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.180000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:45:16.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.169554 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:45:16.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.174368 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:45:16.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.174916 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:45:16.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.175006 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:45:16.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.179702 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:45:16.179788 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:45:16.181701 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:45:16.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.181805 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:45:16.183049 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:45:16.183134 systemd[1]: Stopped network-cleanup.service. Jul 10 00:45:16.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.184399 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:45:16.184433 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:45:16.185596 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:45:16.185625 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:45:16.187148 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:45:16.187190 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:45:16.188547 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:45:16.188585 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:45:16.189838 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:45:16.189875 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:45:16.191559 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:45:16.191599 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:45:16.193723 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:45:16.195244 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:45:16.195298 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:45:16.198996 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:45:16.199077 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:45:16.200144 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:45:16.202226 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:45:16.208384 systemd[1]: Switching root. Jul 10 00:45:16.227995 iscsid[747]: iscsid shutting down. Jul 10 00:45:16.228691 systemd-journald[290]: Received SIGTERM from PID 1 (n/a). Jul 10 00:45:16.228736 systemd-journald[290]: Journal stopped Jul 10 00:45:18.248788 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:45:18.248840 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:45:18.248857 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:45:18.248867 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:45:18.248879 kernel: SELinux: policy capability open_perms=1 Jul 10 00:45:18.248888 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:45:18.248898 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:45:18.248909 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:45:18.248918 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:45:18.248928 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:45:18.248937 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:45:18.248948 systemd[1]: Successfully loaded SELinux policy in 34.407ms. Jul 10 00:45:18.248969 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.183ms. Jul 10 00:45:18.248982 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:45:18.248994 systemd[1]: Detected virtualization kvm. Jul 10 00:45:18.249005 systemd[1]: Detected architecture arm64. Jul 10 00:45:18.249015 systemd[1]: Detected first boot. Jul 10 00:45:18.249026 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:45:18.249036 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:45:18.249047 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:45:18.249059 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:45:18.249071 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:45:18.249092 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:45:18.249104 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:45:18.249118 systemd[1]: Stopped iscsid.service. Jul 10 00:45:18.249129 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:45:18.249140 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:45:18.249152 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:45:18.249162 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:45:18.249175 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:45:18.249185 systemd[1]: Created slice system-getty.slice. Jul 10 00:45:18.249195 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:45:18.249206 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:45:18.249217 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:45:18.249228 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:45:18.249238 systemd[1]: Created slice user.slice. Jul 10 00:45:18.249251 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:45:18.249262 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:45:18.249273 systemd[1]: Set up automount boot.automount. Jul 10 00:45:18.249283 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:45:18.249295 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:45:18.249307 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:45:18.249318 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:45:18.249328 systemd[1]: Reached target integritysetup.target. Jul 10 00:45:18.249341 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:45:18.249351 systemd[1]: Reached target remote-fs.target. Jul 10 00:45:18.249375 systemd[1]: Reached target slices.target. Jul 10 00:45:18.249386 systemd[1]: Reached target swap.target. Jul 10 00:45:18.249397 systemd[1]: Reached target torcx.target. Jul 10 00:45:18.249408 systemd[1]: Reached target veritysetup.target. Jul 10 00:45:18.249420 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:45:18.249432 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:45:18.249442 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:45:18.249453 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:45:18.249464 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:45:18.249474 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:45:18.249485 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:45:18.249496 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:45:18.249508 systemd[1]: Mounting media.mount... Jul 10 00:45:18.249522 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:45:18.249532 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:45:18.249543 systemd[1]: Mounting tmp.mount... Jul 10 00:45:18.249553 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:45:18.249564 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:45:18.249574 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:45:18.249585 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:45:18.249595 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:45:18.249606 systemd[1]: Starting modprobe@drm.service... Jul 10 00:45:18.249618 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:45:18.249629 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:45:18.249640 systemd[1]: Starting modprobe@loop.service... Jul 10 00:45:18.249650 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:45:18.249661 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:45:18.249671 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:45:18.249681 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:45:18.249691 kernel: fuse: init (API version 7.34) Jul 10 00:45:18.249704 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:45:18.249715 systemd[1]: Stopped systemd-journald.service. Jul 10 00:45:18.249726 systemd[1]: Starting systemd-journald.service... Jul 10 00:45:18.249737 kernel: loop: module loaded Jul 10 00:45:18.249749 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:45:18.249760 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:45:18.249771 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:45:18.249782 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:45:18.249792 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:45:18.249803 systemd[1]: Stopped verity-setup.service. Jul 10 00:45:18.249813 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:45:18.249824 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:45:18.249834 systemd[1]: Mounted media.mount. Jul 10 00:45:18.249846 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:45:18.249857 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:45:18.249867 systemd[1]: Mounted tmp.mount. Jul 10 00:45:18.249880 systemd-journald[996]: Journal started Jul 10 00:45:18.249919 systemd-journald[996]: Runtime Journal (/run/log/journal/07a08bf675954d5fb71820ac0398df8f) is 6.0M, max 48.7M, 42.6M free. Jul 10 00:45:16.299000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:45:16.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:45:16.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:45:16.388000 audit: BPF prog-id=10 op=LOAD Jul 10 00:45:16.388000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:45:16.389000 audit: BPF prog-id=11 op=LOAD Jul 10 00:45:16.389000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:45:16.433000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:45:16.433000 audit[930]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd89c a1=4000150de0 a2=40001570c0 a3=32 items=0 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.433000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:45:16.434000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:45:16.434000 audit[930]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001cd975 a2=1ed a3=0 items=2 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.434000 audit: CWD cwd="/" Jul 10 00:45:16.434000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:16.434000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:16.434000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:45:18.109000 audit: BPF prog-id=12 op=LOAD Jul 10 00:45:18.109000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:45:18.109000 audit: BPF prog-id=13 op=LOAD Jul 10 00:45:18.109000 audit: BPF prog-id=14 op=LOAD Jul 10 00:45:18.109000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:45:18.109000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:45:18.110000 audit: BPF prog-id=15 op=LOAD Jul 10 00:45:18.110000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:45:18.110000 audit: BPF prog-id=16 op=LOAD Jul 10 00:45:18.110000 audit: BPF prog-id=17 op=LOAD Jul 10 00:45:18.110000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:45:18.110000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:45:18.111000 audit: BPF prog-id=18 op=LOAD Jul 10 00:45:18.111000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:45:18.111000 audit: BPF prog-id=19 op=LOAD Jul 10 00:45:18.111000 audit: BPF prog-id=20 op=LOAD Jul 10 00:45:18.111000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:45:18.111000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:45:18.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.119000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:45:18.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.218000 audit: BPF prog-id=21 op=LOAD Jul 10 00:45:18.218000 audit: BPF prog-id=22 op=LOAD Jul 10 00:45:18.218000 audit: BPF prog-id=23 op=LOAD Jul 10 00:45:18.218000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:45:18.218000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:45:18.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.247000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:45:18.247000 audit[996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffdb4b4b30 a2=4000 a3=1 items=0 ppid=1 pid=996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:18.247000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:45:16.431585 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:45:18.107748 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:45:16.432276 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:45:18.107760 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:45:16.432296 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:45:18.112006 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:45:16.432325 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:45:16.432335 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:45:16.432381 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:45:16.432393 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:45:16.432588 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:45:16.432622 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:45:16.432633 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:45:16.433431 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:45:18.252038 systemd[1]: Started systemd-journald.service. Jul 10 00:45:16.433465 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:45:16.433484 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:45:18.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.433498 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:45:16.433517 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:45:16.433530 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:16Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:45:17.852230 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:17Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:45:17.852514 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:17Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:45:17.852620 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:17Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:45:17.852791 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:17Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:45:18.252755 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:45:17.852840 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:17Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:45:17.852899 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:45:17Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:45:18.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.253946 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:45:18.254118 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:45:18.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.255261 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:45:18.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.255753 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:45:18.256909 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:45:18.257059 systemd[1]: Finished modprobe@drm.service. Jul 10 00:45:18.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.258231 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:45:18.258394 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:45:18.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.259495 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:45:18.259651 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:45:18.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.260732 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:45:18.260892 systemd[1]: Finished modprobe@loop.service. Jul 10 00:45:18.262060 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:45:18.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.263251 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:45:18.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.264621 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:45:18.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.265728 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:45:18.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.267165 systemd[1]: Reached target network-pre.target. Jul 10 00:45:18.269389 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:45:18.271280 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:45:18.272049 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:45:18.273677 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:45:18.276902 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:45:18.277851 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:45:18.279096 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:45:18.280146 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:45:18.281503 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:45:18.283848 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:45:18.286262 systemd-journald[996]: Time spent on flushing to /var/log/journal/07a08bf675954d5fb71820ac0398df8f is 14.147ms for 997 entries. Jul 10 00:45:18.286262 systemd-journald[996]: System Journal (/var/log/journal/07a08bf675954d5fb71820ac0398df8f) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:45:18.311490 systemd-journald[996]: Received client request to flush runtime journal. Jul 10 00:45:18.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.287918 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:45:18.290730 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:45:18.311906 udevadm[1032]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 10 00:45:18.291938 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:45:18.293113 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:45:18.294180 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:45:18.296281 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:45:18.297406 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:45:18.315742 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:45:18.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.316902 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:45:18.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.652060 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:45:18.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.653000 audit: BPF prog-id=24 op=LOAD Jul 10 00:45:18.653000 audit: BPF prog-id=25 op=LOAD Jul 10 00:45:18.653000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:45:18.653000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:45:18.654423 systemd[1]: Starting systemd-udevd.service... Jul 10 00:45:18.672603 systemd-udevd[1034]: Using default interface naming scheme 'v252'. Jul 10 00:45:18.687692 systemd[1]: Started systemd-udevd.service. Jul 10 00:45:18.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.689000 audit: BPF prog-id=26 op=LOAD Jul 10 00:45:18.690457 systemd[1]: Starting systemd-networkd.service... Jul 10 00:45:18.714000 audit: BPF prog-id=27 op=LOAD Jul 10 00:45:18.714000 audit: BPF prog-id=28 op=LOAD Jul 10 00:45:18.714000 audit: BPF prog-id=29 op=LOAD Jul 10 00:45:18.715664 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:45:18.728481 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 10 00:45:18.744735 systemd[1]: Started systemd-userdbd.service. Jul 10 00:45:18.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.754847 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:45:18.796880 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:45:18.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.799292 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:45:18.806492 systemd-networkd[1043]: lo: Link UP Jul 10 00:45:18.806506 systemd-networkd[1043]: lo: Gained carrier Jul 10 00:45:18.806890 systemd-networkd[1043]: Enumeration completed Jul 10 00:45:18.807004 systemd-networkd[1043]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:45:18.807005 systemd[1]: Started systemd-networkd.service. Jul 10 00:45:18.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.809647 systemd-networkd[1043]: eth0: Link UP Jul 10 00:45:18.809658 systemd-networkd[1043]: eth0: Gained carrier Jul 10 00:45:18.812557 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:45:18.830486 systemd-networkd[1043]: eth0: DHCPv4 address 10.0.0.129/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:45:18.850261 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:45:18.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.851385 systemd[1]: Reached target cryptsetup.target. Jul 10 00:45:18.853418 systemd[1]: Starting lvm2-activation.service... Jul 10 00:45:18.857317 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:45:18.888536 systemd[1]: Finished lvm2-activation.service. Jul 10 00:45:18.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.889572 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:45:18.890470 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:45:18.890500 systemd[1]: Reached target local-fs.target. Jul 10 00:45:18.891307 systemd[1]: Reached target machines.target. Jul 10 00:45:18.893468 systemd[1]: Starting ldconfig.service... Jul 10 00:45:18.894539 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:45:18.894627 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:18.895970 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:45:18.898598 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:45:18.901228 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:45:18.904243 systemd[1]: Starting systemd-sysext.service... Jul 10 00:45:18.908789 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1070 (bootctl) Jul 10 00:45:18.910138 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:45:18.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.913025 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:45:18.925403 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:45:18.936718 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:45:18.936931 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:45:18.987138 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:45:18.988431 kernel: loop0: detected capacity change from 0 to 211168 Jul 10 00:45:18.988526 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:45:18.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:18.999374 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:45:18.999605 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Jul 10 00:45:18.999605 systemd-fsck[1082]: /dev/vda1: 236 files, 117310/258078 clusters Jul 10 00:45:19.005166 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:45:19.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.007969 systemd[1]: Mounting boot.mount... Jul 10 00:45:19.015211 systemd[1]: Mounted boot.mount. Jul 10 00:45:19.016377 kernel: loop1: detected capacity change from 0 to 211168 Jul 10 00:45:19.023554 (sd-sysext)[1086]: Using extensions 'kubernetes'. Jul 10 00:45:19.023906 (sd-sysext)[1086]: Merged extensions into '/usr'. Jul 10 00:45:19.026140 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:45:19.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.040364 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.041679 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:45:19.043671 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:45:19.045586 systemd[1]: Starting modprobe@loop.service... Jul 10 00:45:19.046480 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.046614 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:19.047311 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:45:19.047503 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:45:19.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.048845 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:45:19.048953 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:45:19.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.050446 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:45:19.050549 systemd[1]: Finished modprobe@loop.service. Jul 10 00:45:19.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.052007 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:45:19.052114 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.093516 ldconfig[1069]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:45:19.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.096282 systemd[1]: Finished ldconfig.service. Jul 10 00:45:19.242795 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:45:19.247816 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:45:19.249656 systemd[1]: Finished systemd-sysext.service. Jul 10 00:45:19.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.251702 systemd[1]: Starting ensure-sysext.service... Jul 10 00:45:19.253502 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:45:19.257847 systemd[1]: Reloading. Jul 10 00:45:19.266700 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:45:19.268744 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:45:19.271195 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:45:19.302418 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-10T00:45:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:45:19.302444 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-10T00:45:19Z" level=info msg="torcx already run" Jul 10 00:45:19.357773 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:45:19.357794 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:45:19.373132 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:45:19.414000 audit: BPF prog-id=30 op=LOAD Jul 10 00:45:19.414000 audit: BPF prog-id=31 op=LOAD Jul 10 00:45:19.414000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:45:19.414000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:45:19.416000 audit: BPF prog-id=32 op=LOAD Jul 10 00:45:19.416000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:45:19.416000 audit: BPF prog-id=33 op=LOAD Jul 10 00:45:19.416000 audit: BPF prog-id=34 op=LOAD Jul 10 00:45:19.416000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:45:19.416000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:45:19.417000 audit: BPF prog-id=35 op=LOAD Jul 10 00:45:19.417000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:45:19.417000 audit: BPF prog-id=36 op=LOAD Jul 10 00:45:19.417000 audit: BPF prog-id=37 op=LOAD Jul 10 00:45:19.417000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:45:19.417000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:45:19.418000 audit: BPF prog-id=38 op=LOAD Jul 10 00:45:19.418000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:45:19.421292 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:45:19.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.425854 systemd[1]: Starting audit-rules.service... Jul 10 00:45:19.427763 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:45:19.429787 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:45:19.433000 audit: BPF prog-id=39 op=LOAD Jul 10 00:45:19.435146 systemd[1]: Starting systemd-resolved.service... Jul 10 00:45:19.436000 audit: BPF prog-id=40 op=LOAD Jul 10 00:45:19.437848 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:45:19.439700 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:45:19.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.441699 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:45:19.449000 audit[1163]: SYSTEM_BOOT pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.444793 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:45:19.446641 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.448046 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:45:19.450198 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:45:19.452557 systemd[1]: Starting modprobe@loop.service... Jul 10 00:45:19.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.453352 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.453558 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:19.453734 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:45:19.454683 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:45:19.454810 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:45:19.456299 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:45:19.456440 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:45:19.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.457936 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:45:19.458047 systemd[1]: Finished modprobe@loop.service. Jul 10 00:45:19.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.461033 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:45:19.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.463603 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.464943 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:45:19.467006 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:45:19.469194 systemd[1]: Starting modprobe@loop.service... Jul 10 00:45:19.470031 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.470220 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:19.471656 systemd[1]: Starting systemd-update-done.service... Jul 10 00:45:19.472507 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:45:19.473893 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:45:19.474019 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:45:19.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.475415 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:45:19.475526 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:45:19.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.476858 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:45:19.476974 systemd[1]: Finished modprobe@loop.service. Jul 10 00:45:19.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.478373 systemd[1]: Finished systemd-update-done.service. Jul 10 00:45:19.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.481813 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:45:19.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.484252 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.485635 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:45:19.487747 systemd[1]: Starting modprobe@drm.service... Jul 10 00:45:19.489707 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:45:19.491945 systemd[1]: Starting modprobe@loop.service... Jul 10 00:45:19.492881 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.493052 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:19.495765 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:45:19.496999 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:45:19.497983 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:45:19.498146 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:45:19.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.501302 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:45:19.501456 systemd[1]: Finished modprobe@drm.service. Jul 10 00:45:19.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.502635 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:45:19.502746 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:45:19.504125 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:45:19.504259 systemd[1]: Finished modprobe@loop.service. Jul 10 00:45:19.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:19.505000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:45:19.505000 audit[1183]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc8f36dc0 a2=420 a3=0 items=0 ppid=1152 pid=1183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:19.505000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:45:19.505644 augenrules[1183]: No rules Jul 10 00:45:19.505729 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:45:19.505821 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.506814 systemd[1]: Finished ensure-sysext.service. Jul 10 00:45:19.508032 systemd[1]: Finished audit-rules.service. Jul 10 00:45:19.510697 systemd-resolved[1156]: Positive Trust Anchors: Jul 10 00:45:19.510708 systemd-resolved[1156]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:45:19.510736 systemd-resolved[1156]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:45:19.514238 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:45:19.055556 systemd-timesyncd[1162]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:45:19.078084 systemd-journald[996]: Time jumped backwards, rotating. Jul 10 00:45:19.055954 systemd[1]: Reached target time-set.target. Jul 10 00:45:19.056662 systemd-timesyncd[1162]: Initial clock synchronization to Thu 2025-07-10 00:45:19.055463 UTC. Jul 10 00:45:19.065697 systemd-resolved[1156]: Defaulting to hostname 'linux'. Jul 10 00:45:19.067107 systemd[1]: Started systemd-resolved.service. Jul 10 00:45:19.068105 systemd[1]: Reached target network.target. Jul 10 00:45:19.068852 systemd[1]: Reached target nss-lookup.target. Jul 10 00:45:19.069624 systemd[1]: Reached target sysinit.target. Jul 10 00:45:19.070486 systemd[1]: Started motdgen.path. Jul 10 00:45:19.071193 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:45:19.072463 systemd[1]: Started logrotate.timer. Jul 10 00:45:19.073276 systemd[1]: Started mdadm.timer. Jul 10 00:45:19.073943 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:45:19.074736 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:45:19.074756 systemd[1]: Reached target paths.target. Jul 10 00:45:19.075497 systemd[1]: Reached target timers.target. Jul 10 00:45:19.076730 systemd[1]: Listening on dbus.socket. Jul 10 00:45:19.078689 systemd[1]: Starting docker.socket... Jul 10 00:45:19.081724 systemd[1]: Listening on sshd.socket. Jul 10 00:45:19.082649 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:19.083099 systemd[1]: Listening on docker.socket. Jul 10 00:45:19.083933 systemd[1]: Reached target sockets.target. Jul 10 00:45:19.084687 systemd[1]: Reached target basic.target. Jul 10 00:45:19.085488 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.085520 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:45:19.086462 systemd[1]: Starting containerd.service... Jul 10 00:45:19.088211 systemd[1]: Starting dbus.service... Jul 10 00:45:19.089902 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:45:19.091772 systemd[1]: Starting extend-filesystems.service... Jul 10 00:45:19.092703 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:45:19.094066 systemd[1]: Starting motdgen.service... Jul 10 00:45:19.100551 jq[1195]: false Jul 10 00:45:19.097022 systemd[1]: Starting prepare-helm.service... Jul 10 00:45:19.099156 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:45:19.101005 systemd[1]: Starting sshd-keygen.service... Jul 10 00:45:19.103685 systemd[1]: Starting systemd-logind.service... Jul 10 00:45:19.104459 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:45:19.104539 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:45:19.104939 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:45:19.107168 systemd[1]: Starting update-engine.service... Jul 10 00:45:19.108907 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:45:19.111399 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:45:19.114984 jq[1213]: true Jul 10 00:45:19.111572 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:45:19.112669 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:45:19.112901 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:45:19.116913 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:45:19.117072 systemd[1]: Finished motdgen.service. Jul 10 00:45:19.131485 jq[1217]: true Jul 10 00:45:19.130266 systemd[1]: Started dbus.service. Jul 10 00:45:19.130112 dbus-daemon[1194]: [system] SELinux support is enabled Jul 10 00:45:19.132003 tar[1216]: linux-arm64/LICENSE Jul 10 00:45:19.132003 tar[1216]: linux-arm64/helm Jul 10 00:45:19.133093 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:45:19.133120 systemd[1]: Reached target system-config.target. Jul 10 00:45:19.133966 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:45:19.133992 systemd[1]: Reached target user-config.target. Jul 10 00:45:19.139370 extend-filesystems[1196]: Found loop1 Jul 10 00:45:19.139370 extend-filesystems[1196]: Found vda Jul 10 00:45:19.139370 extend-filesystems[1196]: Found vda1 Jul 10 00:45:19.143779 extend-filesystems[1196]: Found vda2 Jul 10 00:45:19.143779 extend-filesystems[1196]: Found vda3 Jul 10 00:45:19.143779 extend-filesystems[1196]: Found usr Jul 10 00:45:19.143779 extend-filesystems[1196]: Found vda4 Jul 10 00:45:19.143779 extend-filesystems[1196]: Found vda6 Jul 10 00:45:19.143779 extend-filesystems[1196]: Found vda7 Jul 10 00:45:19.143779 extend-filesystems[1196]: Found vda9 Jul 10 00:45:19.143779 extend-filesystems[1196]: Checking size of /dev/vda9 Jul 10 00:45:19.172909 extend-filesystems[1196]: Resized partition /dev/vda9 Jul 10 00:45:19.169283 systemd-logind[1206]: Watching system buttons on /dev/input/event0 (Power Button) Jul 10 00:45:19.175458 extend-filesystems[1243]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:45:19.178720 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:45:19.169451 systemd-logind[1206]: New seat seat0. Jul 10 00:45:19.172556 systemd[1]: Started systemd-logind.service. Jul 10 00:45:19.204866 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:45:19.208235 update_engine[1211]: I0710 00:45:19.206303 1211 main.cc:92] Flatcar Update Engine starting Jul 10 00:45:19.217875 update_engine[1211]: I0710 00:45:19.211002 1211 update_check_scheduler.cc:74] Next update check in 7m33s Jul 10 00:45:19.211000 systemd[1]: Started update-engine.service. Jul 10 00:45:19.218115 extend-filesystems[1243]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:45:19.218115 extend-filesystems[1243]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:45:19.218115 extend-filesystems[1243]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:45:19.223126 extend-filesystems[1196]: Resized filesystem in /dev/vda9 Jul 10 00:45:19.219610 systemd[1]: Started locksmithd.service. Jul 10 00:45:19.224783 bash[1242]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:45:19.220888 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:45:19.222964 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:45:19.223110 systemd[1]: Finished extend-filesystems.service. Jul 10 00:45:19.238734 env[1218]: time="2025-07-10T00:45:19.238688510Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:45:19.254319 env[1218]: time="2025-07-10T00:45:19.254275910Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:45:19.254535 env[1218]: time="2025-07-10T00:45:19.254505990Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.255863270Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.255892750Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256073350Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256090070Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256103070Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256112150Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256183710Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256442190Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256564470Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:45:19.256781 env[1218]: time="2025-07-10T00:45:19.256592430Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:45:19.257040 env[1218]: time="2025-07-10T00:45:19.256644510Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:45:19.257040 env[1218]: time="2025-07-10T00:45:19.256656590Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261106430Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261137070Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261149430Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261182350Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261198390Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261213750Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261227550Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261555430Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261576230Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261588630Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261601550Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261614830Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261733150Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:45:19.262916 env[1218]: time="2025-07-10T00:45:19.261804910Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262040350Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262065230Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262077790Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262232030Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262245150Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262256470Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262268470Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262281910Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262295590Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262306750Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262318070Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262331350Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262467790Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262483190Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263209 env[1218]: time="2025-07-10T00:45:19.262501390Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263481 env[1218]: time="2025-07-10T00:45:19.262513630Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:45:19.263481 env[1218]: time="2025-07-10T00:45:19.262536750Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:45:19.263481 env[1218]: time="2025-07-10T00:45:19.262549230Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:45:19.263481 env[1218]: time="2025-07-10T00:45:19.262565030Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:45:19.263481 env[1218]: time="2025-07-10T00:45:19.262600550Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:45:19.263587 env[1218]: time="2025-07-10T00:45:19.262788150Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:45:19.263587 env[1218]: time="2025-07-10T00:45:19.262886870Z" level=info msg="Connect containerd service" Jul 10 00:45:19.263587 env[1218]: time="2025-07-10T00:45:19.262917590Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:45:19.263587 env[1218]: time="2025-07-10T00:45:19.263476710Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.263844350Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.263881630Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.263926790Z" level=info msg="containerd successfully booted in 0.025779s" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.263989830Z" level=info msg="Start subscribing containerd event" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.264036710Z" level=info msg="Start recovering state" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.264541950Z" level=info msg="Start event monitor" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.264573470Z" level=info msg="Start snapshots syncer" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.264585190Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:45:19.266771 env[1218]: time="2025-07-10T00:45:19.264596830Z" level=info msg="Start streaming server" Jul 10 00:45:19.263990 systemd[1]: Started containerd.service. Jul 10 00:45:19.285273 locksmithd[1248]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:45:19.551597 tar[1216]: linux-arm64/README.md Jul 10 00:45:19.555757 systemd[1]: Finished prepare-helm.service. Jul 10 00:45:20.094936 systemd-networkd[1043]: eth0: Gained IPv6LL Jul 10 00:45:20.096773 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:45:20.098052 systemd[1]: Reached target network-online.target. Jul 10 00:45:20.100392 systemd[1]: Starting kubelet.service... Jul 10 00:45:20.695130 systemd[1]: Started kubelet.service. Jul 10 00:45:21.121434 kubelet[1262]: E0710 00:45:21.121336 1262 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:45:21.123265 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:45:21.123410 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:45:22.206464 sshd_keygen[1214]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:45:22.223922 systemd[1]: Finished sshd-keygen.service. Jul 10 00:45:22.226247 systemd[1]: Starting issuegen.service... Jul 10 00:45:22.230804 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:45:22.231083 systemd[1]: Finished issuegen.service. Jul 10 00:45:22.233229 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:45:22.239797 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:45:22.242306 systemd[1]: Started getty@tty1.service. Jul 10 00:45:22.244363 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 10 00:45:22.245417 systemd[1]: Reached target getty.target. Jul 10 00:45:22.246300 systemd[1]: Reached target multi-user.target. Jul 10 00:45:22.248465 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:45:22.255342 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:45:22.255500 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:45:22.256621 systemd[1]: Startup finished in 737ms (kernel) + 4.595s (initrd) + 6.459s (userspace) = 11.792s. Jul 10 00:45:23.604761 systemd[1]: Created slice system-sshd.slice. Jul 10 00:45:23.605919 systemd[1]: Started sshd@0-10.0.0.129:22-10.0.0.1:37642.service. Jul 10 00:45:23.646753 sshd[1285]: Accepted publickey for core from 10.0.0.1 port 37642 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:23.648860 sshd[1285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:23.657199 systemd[1]: Created slice user-500.slice. Jul 10 00:45:23.658370 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:45:23.660269 systemd-logind[1206]: New session 1 of user core. Jul 10 00:45:23.666335 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:45:23.667657 systemd[1]: Starting user@500.service... Jul 10 00:45:23.670547 (systemd)[1288]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:23.735926 systemd[1288]: Queued start job for default target default.target. Jul 10 00:45:23.736432 systemd[1288]: Reached target paths.target. Jul 10 00:45:23.736465 systemd[1288]: Reached target sockets.target. Jul 10 00:45:23.736477 systemd[1288]: Reached target timers.target. Jul 10 00:45:23.736487 systemd[1288]: Reached target basic.target. Jul 10 00:45:23.736541 systemd[1288]: Reached target default.target. Jul 10 00:45:23.736569 systemd[1288]: Startup finished in 60ms. Jul 10 00:45:23.736642 systemd[1]: Started user@500.service. Jul 10 00:45:23.737658 systemd[1]: Started session-1.scope. Jul 10 00:45:23.791559 systemd[1]: Started sshd@1-10.0.0.129:22-10.0.0.1:37646.service. Jul 10 00:45:23.837384 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 37646 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:23.839060 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:23.844120 systemd[1]: Started session-2.scope. Jul 10 00:45:23.844384 systemd-logind[1206]: New session 2 of user core. Jul 10 00:45:23.900314 sshd[1297]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:23.903776 systemd[1]: Started sshd@2-10.0.0.129:22-10.0.0.1:37648.service. Jul 10 00:45:23.904277 systemd[1]: sshd@1-10.0.0.129:22-10.0.0.1:37646.service: Deactivated successfully. Jul 10 00:45:23.905322 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:45:23.905343 systemd-logind[1206]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:45:23.906256 systemd-logind[1206]: Removed session 2. Jul 10 00:45:23.937732 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 37648 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:23.938909 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:23.943045 systemd[1]: Started session-3.scope. Jul 10 00:45:23.943191 systemd-logind[1206]: New session 3 of user core. Jul 10 00:45:23.992341 sshd[1302]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:23.995029 systemd[1]: sshd@2-10.0.0.129:22-10.0.0.1:37648.service: Deactivated successfully. Jul 10 00:45:23.995599 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:45:23.996081 systemd-logind[1206]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:45:23.997125 systemd[1]: Started sshd@3-10.0.0.129:22-10.0.0.1:37664.service. Jul 10 00:45:23.997740 systemd-logind[1206]: Removed session 3. Jul 10 00:45:24.035899 sshd[1309]: Accepted publickey for core from 10.0.0.1 port 37664 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:24.037275 sshd[1309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:24.041031 systemd-logind[1206]: New session 4 of user core. Jul 10 00:45:24.041891 systemd[1]: Started session-4.scope. Jul 10 00:45:24.098145 sshd[1309]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:24.101578 systemd[1]: Started sshd@4-10.0.0.129:22-10.0.0.1:37666.service. Jul 10 00:45:24.102085 systemd[1]: sshd@3-10.0.0.129:22-10.0.0.1:37664.service: Deactivated successfully. Jul 10 00:45:24.103056 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:45:24.103557 systemd-logind[1206]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:45:24.104528 systemd-logind[1206]: Removed session 4. Jul 10 00:45:24.136615 sshd[1314]: Accepted publickey for core from 10.0.0.1 port 37666 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:24.138102 sshd[1314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:24.141331 systemd-logind[1206]: New session 5 of user core. Jul 10 00:45:24.142175 systemd[1]: Started session-5.scope. Jul 10 00:45:24.210498 sudo[1318]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:45:24.210747 sudo[1318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:45:24.227011 dbus-daemon[1194]: avc: received setenforce notice (enforcing=1) Jul 10 00:45:24.228748 sudo[1318]: pam_unix(sudo:session): session closed for user root Jul 10 00:45:24.230667 sshd[1314]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:24.235433 systemd[1]: Started sshd@5-10.0.0.129:22-10.0.0.1:37678.service. Jul 10 00:45:24.238009 systemd[1]: sshd@4-10.0.0.129:22-10.0.0.1:37666.service: Deactivated successfully. Jul 10 00:45:24.238169 systemd-logind[1206]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:45:24.238606 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:45:24.239373 systemd-logind[1206]: Removed session 5. Jul 10 00:45:24.276457 sshd[1321]: Accepted publickey for core from 10.0.0.1 port 37678 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:24.278091 sshd[1321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:24.282426 systemd[1]: Started session-6.scope. Jul 10 00:45:24.282903 systemd-logind[1206]: New session 6 of user core. Jul 10 00:45:24.338147 sudo[1326]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:45:24.338457 sudo[1326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:45:24.341249 sudo[1326]: pam_unix(sudo:session): session closed for user root Jul 10 00:45:24.345795 sudo[1325]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:45:24.346024 sudo[1325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:45:24.354851 systemd[1]: Stopping audit-rules.service... Jul 10 00:45:24.355000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:45:24.357163 auditctl[1329]: No rules Jul 10 00:45:24.357568 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:45:24.357721 systemd[1]: Stopped audit-rules.service. Jul 10 00:45:24.359068 kernel: kauditd_printk_skb: 181 callbacks suppressed Jul 10 00:45:24.359115 kernel: audit: type=1305 audit(1752108324.355:214): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:45:24.359140 kernel: audit: type=1300 audit(1752108324.355:214): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdc6ce080 a2=420 a3=0 items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.355000 audit[1329]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdc6ce080 a2=420 a3=0 items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.359589 systemd[1]: Starting audit-rules.service... Jul 10 00:45:24.362294 kernel: audit: type=1327 audit(1752108324.355:214): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:45:24.355000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:45:24.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.365848 kernel: audit: type=1131 audit(1752108324.356:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.376568 augenrules[1346]: No rules Jul 10 00:45:24.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.378140 sudo[1325]: pam_unix(sudo:session): session closed for user root Jul 10 00:45:24.377332 systemd[1]: Finished audit-rules.service. Jul 10 00:45:24.377000 audit[1325]: USER_END pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.383257 kernel: audit: type=1130 audit(1752108324.376:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.383310 kernel: audit: type=1106 audit(1752108324.377:217): pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.383326 kernel: audit: type=1104 audit(1752108324.377:218): pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.377000 audit[1325]: CRED_DISP pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.382913 sshd[1321]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:24.385297 systemd[1]: sshd@5-10.0.0.129:22-10.0.0.1:37678.service: Deactivated successfully. Jul 10 00:45:24.386070 kernel: audit: type=1106 audit(1752108324.382:219): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.382000 audit[1321]: USER_END pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.385862 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:45:24.386373 systemd-logind[1206]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:45:24.387343 systemd[1]: Started sshd@6-10.0.0.129:22-10.0.0.1:37690.service. Jul 10 00:45:24.388238 systemd-logind[1206]: Removed session 6. Jul 10 00:45:24.382000 audit[1321]: CRED_DISP pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.392437 kernel: audit: type=1104 audit(1752108324.382:220): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.392470 kernel: audit: type=1131 audit(1752108324.384:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.129:22-10.0.0.1:37678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.129:22-10.0.0.1:37678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.129:22-10.0.0.1:37690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.420000 audit[1352]: USER_ACCT pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.421782 sshd[1352]: Accepted publickey for core from 10.0.0.1 port 37690 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:45:24.421000 audit[1352]: CRED_ACQ pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.421000 audit[1352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe98043b0 a2=3 a3=1 items=0 ppid=1 pid=1352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:24.422997 sshd[1352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:24.426866 systemd-logind[1206]: New session 7 of user core. Jul 10 00:45:24.427294 systemd[1]: Started session-7.scope. Jul 10 00:45:24.429000 audit[1352]: USER_START pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.431000 audit[1354]: CRED_ACQ pid=1354 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:24.478000 audit[1355]: USER_ACCT pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.478983 sudo[1355]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:45:24.478000 audit[1355]: CRED_REFR pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.479492 sudo[1355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:45:24.480000 audit[1355]: USER_START pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:45:24.565043 systemd[1]: Starting docker.service... Jul 10 00:45:24.650656 env[1367]: time="2025-07-10T00:45:24.650596870Z" level=info msg="Starting up" Jul 10 00:45:24.652186 env[1367]: time="2025-07-10T00:45:24.652163870Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:45:24.652186 env[1367]: time="2025-07-10T00:45:24.652184670Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:45:24.652255 env[1367]: time="2025-07-10T00:45:24.652207310Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:45:24.652255 env[1367]: time="2025-07-10T00:45:24.652217470Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:45:24.654308 env[1367]: time="2025-07-10T00:45:24.654282750Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:45:24.654308 env[1367]: time="2025-07-10T00:45:24.654305110Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:45:24.654408 env[1367]: time="2025-07-10T00:45:24.654320870Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:45:24.654408 env[1367]: time="2025-07-10T00:45:24.654330110Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:45:24.797547 env[1367]: time="2025-07-10T00:45:24.797447830Z" level=info msg="Loading containers: start." Jul 10 00:45:24.859000 audit[1401]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.859000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff87e2330 a2=0 a3=1 items=0 ppid=1367 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.859000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:45:24.861000 audit[1403]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.861000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff7138f80 a2=0 a3=1 items=0 ppid=1367 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.861000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:45:24.863000 audit[1405]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.863000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffccece80 a2=0 a3=1 items=0 ppid=1367 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.863000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:45:24.865000 audit[1407]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.865000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc101cc00 a2=0 a3=1 items=0 ppid=1367 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.865000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:45:24.871000 audit[1409]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.871000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc4ed7b30 a2=0 a3=1 items=0 ppid=1367 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.871000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:45:24.910000 audit[1414]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.910000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff3e5e3b0 a2=0 a3=1 items=0 ppid=1367 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.910000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:45:24.917000 audit[1416]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.917000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc268ad50 a2=0 a3=1 items=0 ppid=1367 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.917000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:45:24.920000 audit[1418]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.920000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd0be8630 a2=0 a3=1 items=0 ppid=1367 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:45:24.922000 audit[1420]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.922000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd1e120d0 a2=0 a3=1 items=0 ppid=1367 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.922000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:45:24.934000 audit[1424]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.934000 audit[1424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdc81fde0 a2=0 a3=1 items=0 ppid=1367 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:45:24.943000 audit[1425]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.943000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd0cc4780 a2=0 a3=1 items=0 ppid=1367 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.943000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:45:24.953848 kernel: Initializing XFRM netlink socket Jul 10 00:45:24.977543 env[1367]: time="2025-07-10T00:45:24.977482110Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:45:24.992000 audit[1433]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:24.992000 audit[1433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc0ef80e0 a2=0 a3=1 items=0 ppid=1367 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:24.992000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:45:25.015000 audit[1436]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.015000 audit[1436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe3bfb760 a2=0 a3=1 items=0 ppid=1367 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.015000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:45:25.018000 audit[1439]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.018000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff0193b30 a2=0 a3=1 items=0 ppid=1367 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.018000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:45:25.020000 audit[1441]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.020000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcd1a2ea0 a2=0 a3=1 items=0 ppid=1367 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:45:25.022000 audit[1443]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.022000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffedbb25e0 a2=0 a3=1 items=0 ppid=1367 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:45:25.024000 audit[1445]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.024000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc15328b0 a2=0 a3=1 items=0 ppid=1367 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:45:25.026000 audit[1447]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.026000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffeba9abc0 a2=0 a3=1 items=0 ppid=1367 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.026000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:45:25.037000 audit[1450]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.037000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc12431b0 a2=0 a3=1 items=0 ppid=1367 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.037000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:45:25.038000 audit[1452]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.038000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd99a9870 a2=0 a3=1 items=0 ppid=1367 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.038000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:45:25.040000 audit[1454]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.040000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffdb9ea4e0 a2=0 a3=1 items=0 ppid=1367 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.040000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:45:25.042000 audit[1456]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.042000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd14405b0 a2=0 a3=1 items=0 ppid=1367 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.042000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:45:25.044124 systemd-networkd[1043]: docker0: Link UP Jul 10 00:45:25.050000 audit[1460]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.050000 audit[1460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd9e34cd0 a2=0 a3=1 items=0 ppid=1367 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.050000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:45:25.060000 audit[1461]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:25.060000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe994c470 a2=0 a3=1 items=0 ppid=1367 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:45:25.061469 env[1367]: time="2025-07-10T00:45:25.061421030Z" level=info msg="Loading containers: done." Jul 10 00:45:25.093793 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1460035533-merged.mount: Deactivated successfully. Jul 10 00:45:25.097011 env[1367]: time="2025-07-10T00:45:25.096949270Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:45:25.097160 env[1367]: time="2025-07-10T00:45:25.097151070Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:45:25.097285 env[1367]: time="2025-07-10T00:45:25.097253390Z" level=info msg="Daemon has completed initialization" Jul 10 00:45:25.111992 systemd[1]: Started docker.service. Jul 10 00:45:25.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:25.118688 env[1367]: time="2025-07-10T00:45:25.118550030Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:45:25.660266 env[1218]: time="2025-07-10T00:45:25.659989470Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 10 00:45:26.324838 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount801231848.mount: Deactivated successfully. Jul 10 00:45:27.693488 env[1218]: time="2025-07-10T00:45:27.693434710Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:27.695146 env[1218]: time="2025-07-10T00:45:27.695116350Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:27.697219 env[1218]: time="2025-07-10T00:45:27.697194190Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:27.698908 env[1218]: time="2025-07-10T00:45:27.698885150Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:27.699717 env[1218]: time="2025-07-10T00:45:27.699686190Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4\"" Jul 10 00:45:27.702876 env[1218]: time="2025-07-10T00:45:27.702852990Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 10 00:45:29.110202 env[1218]: time="2025-07-10T00:45:29.110158430Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.111551 env[1218]: time="2025-07-10T00:45:29.111526030Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.113676 env[1218]: time="2025-07-10T00:45:29.113641910Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.115341 env[1218]: time="2025-07-10T00:45:29.115312950Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.116289 env[1218]: time="2025-07-10T00:45:29.116258430Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65\"" Jul 10 00:45:29.116839 env[1218]: time="2025-07-10T00:45:29.116804190Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 10 00:45:30.410640 env[1218]: time="2025-07-10T00:45:30.410593830Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.412014 env[1218]: time="2025-07-10T00:45:30.411972990Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.414275 env[1218]: time="2025-07-10T00:45:30.414239070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.416480 env[1218]: time="2025-07-10T00:45:30.416442190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.417187 env[1218]: time="2025-07-10T00:45:30.417150510Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf\"" Jul 10 00:45:30.418396 env[1218]: time="2025-07-10T00:45:30.418364070Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 10 00:45:31.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:31.155584 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:45:31.156577 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 10 00:45:31.157415 kernel: audit: type=1130 audit(1752108331.154:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:31.155702 systemd[1]: Stopped kubelet.service. Jul 10 00:45:31.157052 systemd[1]: Starting kubelet.service... Jul 10 00:45:31.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:31.162277 kernel: audit: type=1131 audit(1752108331.154:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:31.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:31.259210 systemd[1]: Started kubelet.service. Jul 10 00:45:31.262833 kernel: audit: type=1130 audit(1752108331.258:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:31.295124 kubelet[1502]: E0710 00:45:31.294851 1502 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:45:31.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:45:31.297261 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:45:31.297387 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:45:31.300846 kernel: audit: type=1131 audit(1752108331.296:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:45:31.493216 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2691604435.mount: Deactivated successfully. Jul 10 00:45:32.042728 env[1218]: time="2025-07-10T00:45:32.042683790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:32.043983 env[1218]: time="2025-07-10T00:45:32.043956470Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:32.045416 env[1218]: time="2025-07-10T00:45:32.045382470Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:32.046714 env[1218]: time="2025-07-10T00:45:32.046691390Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:32.047050 env[1218]: time="2025-07-10T00:45:32.047026550Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455\"" Jul 10 00:45:32.047884 env[1218]: time="2025-07-10T00:45:32.047856750Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 10 00:45:32.582860 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3440058374.mount: Deactivated successfully. Jul 10 00:45:33.653109 env[1218]: time="2025-07-10T00:45:33.653033190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.654461 env[1218]: time="2025-07-10T00:45:33.654421390Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.658710 env[1218]: time="2025-07-10T00:45:33.658674790Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.660489 env[1218]: time="2025-07-10T00:45:33.660459870Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.661379 env[1218]: time="2025-07-10T00:45:33.661356750Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Jul 10 00:45:33.662359 env[1218]: time="2025-07-10T00:45:33.662321630Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:45:34.075762 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3175444109.mount: Deactivated successfully. Jul 10 00:45:34.081572 env[1218]: time="2025-07-10T00:45:34.081517310Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:34.083279 env[1218]: time="2025-07-10T00:45:34.083244470Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:34.084699 env[1218]: time="2025-07-10T00:45:34.084670070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:34.086019 env[1218]: time="2025-07-10T00:45:34.085989190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:34.086527 env[1218]: time="2025-07-10T00:45:34.086496950Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 10 00:45:34.087026 env[1218]: time="2025-07-10T00:45:34.087000870Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 10 00:45:34.564776 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount136789663.mount: Deactivated successfully. Jul 10 00:45:36.640170 env[1218]: time="2025-07-10T00:45:36.640125750Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:36.642148 env[1218]: time="2025-07-10T00:45:36.642118230Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:36.644046 env[1218]: time="2025-07-10T00:45:36.644020710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:36.646087 env[1218]: time="2025-07-10T00:45:36.646050230Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:36.647052 env[1218]: time="2025-07-10T00:45:36.647021390Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Jul 10 00:45:41.548197 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:45:41.548720 systemd[1]: Stopped kubelet.service. Jul 10 00:45:41.554328 kernel: audit: type=1130 audit(1752108341.548:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:41.554454 kernel: audit: type=1131 audit(1752108341.548:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:41.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:41.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:41.550276 systemd[1]: Starting kubelet.service... Jul 10 00:45:41.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:41.664875 kernel: audit: type=1130 audit(1752108341.659:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:41.660304 systemd[1]: Started kubelet.service. Jul 10 00:45:41.731513 kubelet[1536]: E0710 00:45:41.731474 1536 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:45:41.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:45:41.733866 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:45:41.733981 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:45:41.742846 kernel: audit: type=1131 audit(1752108341.733:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:45:42.784427 systemd[1]: Stopped kubelet.service. Jul 10 00:45:42.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:42.786380 systemd[1]: Starting kubelet.service... Jul 10 00:45:42.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:42.789845 kernel: audit: type=1130 audit(1752108342.783:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:42.789902 kernel: audit: type=1131 audit(1752108342.783:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:42.811081 systemd[1]: Reloading. Jul 10 00:45:42.876973 /usr/lib/systemd/system-generators/torcx-generator[1573]: time="2025-07-10T00:45:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:45:42.877002 /usr/lib/systemd/system-generators/torcx-generator[1573]: time="2025-07-10T00:45:42Z" level=info msg="torcx already run" Jul 10 00:45:43.065983 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:45:43.069532 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:45:43.086043 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:45:43.150665 kernel: audit: type=1400 audit(1752108343.140:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150763 kernel: audit: type=1400 audit(1752108343.140:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150782 kernel: audit: type=1400 audit(1752108343.140:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150806 kernel: audit: type=1400 audit(1752108343.140:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit: BPF prog-id=46 op=LOAD Jul 10 00:45:43.143000 audit: BPF prog-id=39 op=UNLOAD Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit: BPF prog-id=47 op=LOAD Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.147000 audit: BPF prog-id=48 op=LOAD Jul 10 00:45:43.147000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:45:43.147000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.149000 audit: BPF prog-id=49 op=LOAD Jul 10 00:45:43.149000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.150000 audit: BPF prog-id=50 op=LOAD Jul 10 00:45:43.150000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit: BPF prog-id=51 op=LOAD Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.151000 audit: BPF prog-id=52 op=LOAD Jul 10 00:45:43.151000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:45:43.151000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.152000 audit: BPF prog-id=53 op=LOAD Jul 10 00:45:43.152000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit: BPF prog-id=54 op=LOAD Jul 10 00:45:43.153000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit: BPF prog-id=55 op=LOAD Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit: BPF prog-id=56 op=LOAD Jul 10 00:45:43.154000 audit: BPF prog-id=42 op=UNLOAD Jul 10 00:45:43.154000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit: BPF prog-id=57 op=LOAD Jul 10 00:45:43.155000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit: BPF prog-id=58 op=LOAD Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.155000 audit: BPF prog-id=59 op=LOAD Jul 10 00:45:43.155000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:45:43.155000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.156000 audit: BPF prog-id=60 op=LOAD Jul 10 00:45:43.156000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:45:43.168942 systemd[1]: Started kubelet.service. Jul 10 00:45:43.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:43.170569 systemd[1]: Stopping kubelet.service... Jul 10 00:45:43.170798 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:45:43.171028 systemd[1]: Stopped kubelet.service. Jul 10 00:45:43.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:43.172401 systemd[1]: Starting kubelet.service... Jul 10 00:45:43.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:43.275065 systemd[1]: Started kubelet.service. Jul 10 00:45:43.318948 kubelet[1615]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:45:43.318948 kubelet[1615]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:45:43.318948 kubelet[1615]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:45:43.319281 kubelet[1615]: I0710 00:45:43.319030 1615 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:45:43.612572 kubelet[1615]: I0710 00:45:43.612538 1615 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 00:45:43.612723 kubelet[1615]: I0710 00:45:43.612711 1615 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:45:43.613048 kubelet[1615]: I0710 00:45:43.613031 1615 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 00:45:43.660278 kubelet[1615]: E0710 00:45:43.660237 1615 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.129:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 00:45:43.663571 kubelet[1615]: I0710 00:45:43.663533 1615 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:45:43.677792 kubelet[1615]: E0710 00:45:43.677757 1615 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:45:43.677938 kubelet[1615]: I0710 00:45:43.677922 1615 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:45:43.680682 kubelet[1615]: I0710 00:45:43.680658 1615 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:45:43.681070 kubelet[1615]: I0710 00:45:43.681043 1615 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:45:43.681283 kubelet[1615]: I0710 00:45:43.681126 1615 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:45:43.681501 kubelet[1615]: I0710 00:45:43.681482 1615 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:45:43.681560 kubelet[1615]: I0710 00:45:43.681552 1615 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 00:45:43.681787 kubelet[1615]: I0710 00:45:43.681772 1615 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:45:43.684625 kubelet[1615]: I0710 00:45:43.684600 1615 kubelet.go:480] "Attempting to sync node with API server" Jul 10 00:45:43.684730 kubelet[1615]: I0710 00:45:43.684718 1615 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:45:43.689720 kubelet[1615]: I0710 00:45:43.689697 1615 kubelet.go:386] "Adding apiserver pod source" Jul 10 00:45:43.691107 kubelet[1615]: I0710 00:45:43.691092 1615 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:45:43.692115 kubelet[1615]: I0710 00:45:43.692096 1615 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:45:43.692892 kubelet[1615]: I0710 00:45:43.692871 1615 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 00:45:43.694857 kubelet[1615]: E0710 00:45:43.693184 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.129:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 00:45:43.694857 kubelet[1615]: E0710 00:45:43.694177 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.129:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 00:45:43.694996 kubelet[1615]: W0710 00:45:43.694982 1615 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:45:43.699987 kubelet[1615]: I0710 00:45:43.699967 1615 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:45:43.700123 kubelet[1615]: I0710 00:45:43.700109 1615 server.go:1289] "Started kubelet" Jul 10 00:45:43.700000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.701313 kubelet[1615]: I0710 00:45:43.701259 1615 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:45:43.700000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:45:43.700000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400013dbf0 a1=40008ac960 a2=400013dbc0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.700000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:45:43.701573 kubelet[1615]: I0710 00:45:43.701546 1615 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:45:43.701643 kubelet[1615]: I0710 00:45:43.701557 1615 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:45:43.700000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.701736 kubelet[1615]: I0710 00:45:43.701676 1615 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:45:43.700000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:45:43.700000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b0b700 a1=40008ac978 a2=400013dc80 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.700000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:45:43.704353 kubelet[1615]: I0710 00:45:43.704316 1615 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:45:43.704540 kubelet[1615]: I0710 00:45:43.704523 1615 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:45:43.705384 kubelet[1615]: I0710 00:45:43.705352 1615 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:45:43.707158 kubelet[1615]: I0710 00:45:43.707138 1615 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:45:43.707358 kubelet[1615]: E0710 00:45:43.707340 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:45:43.708977 kubelet[1615]: I0710 00:45:43.708954 1615 factory.go:223] Registration of the systemd container factory successfully Jul 10 00:45:43.709413 kubelet[1615]: E0710 00:45:43.706518 1615 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.129:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.129:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bd416a3d9eb6 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:45:43.70007007 +0000 UTC m=+0.419560001,LastTimestamp:2025-07-10 00:45:43.70007007 +0000 UTC m=+0.419560001,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:45:43.709503 kubelet[1615]: I0710 00:45:43.709469 1615 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:45:43.709950 kubelet[1615]: E0710 00:45:43.709733 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.129:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.129:6443: connect: connection refused" interval="200ms" Jul 10 00:45:43.711283 kubelet[1615]: I0710 00:45:43.711255 1615 factory.go:223] Registration of the containerd container factory successfully Jul 10 00:45:43.711418 kubelet[1615]: I0710 00:45:43.711388 1615 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:45:43.711502 kubelet[1615]: I0710 00:45:43.711488 1615 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:45:43.711750 kubelet[1615]: E0710 00:45:43.711712 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.129:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 00:45:43.711870 kubelet[1615]: I0710 00:45:43.711848 1615 server.go:317] "Adding debug handlers to kubelet server" Jul 10 00:45:43.712960 kubelet[1615]: E0710 00:45:43.712929 1615 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:45:43.714000 audit[1632]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.714000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdf069880 a2=0 a3=1 items=0 ppid=1615 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.714000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:45:43.715000 audit[1633]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.715000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd91b260 a2=0 a3=1 items=0 ppid=1615 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.715000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:45:43.717000 audit[1636]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.717000 audit[1636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcbe2c960 a2=0 a3=1 items=0 ppid=1615 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:45:43.721645 kubelet[1615]: I0710 00:45:43.721613 1615 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:45:43.721645 kubelet[1615]: I0710 00:45:43.721637 1615 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:45:43.721731 kubelet[1615]: I0710 00:45:43.721657 1615 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:45:43.721000 audit[1640]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.721000 audit[1640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd69e5900 a2=0 a3=1 items=0 ppid=1615 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.721000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:45:43.799590 kubelet[1615]: I0710 00:45:43.799562 1615 policy_none.go:49] "None policy: Start" Jul 10 00:45:43.799590 kubelet[1615]: I0710 00:45:43.799595 1615 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:45:43.799732 kubelet[1615]: I0710 00:45:43.799609 1615 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:45:43.804544 systemd[1]: Created slice kubepods.slice. Jul 10 00:45:43.806000 audit[1644]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.806000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc55f8510 a2=0 a3=1 items=0 ppid=1615 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.806000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:45:43.808039 kubelet[1615]: E0710 00:45:43.807955 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:45:43.808482 kubelet[1615]: I0710 00:45:43.808454 1615 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 00:45:43.808000 audit[1646]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.808000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe4600200 a2=0 a3=1 items=0 ppid=1615 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:45:43.809000 audit[1647]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:43.809000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdc7b61a0 a2=0 a3=1 items=0 ppid=1615 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.809000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:45:43.810302 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:45:43.810499 kubelet[1615]: I0710 00:45:43.810479 1615 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 00:45:43.810545 kubelet[1615]: I0710 00:45:43.810504 1615 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 00:45:43.810545 kubelet[1615]: I0710 00:45:43.810524 1615 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:45:43.810545 kubelet[1615]: I0710 00:45:43.810538 1615 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 00:45:43.810611 kubelet[1615]: E0710 00:45:43.810582 1615 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:45:43.811727 kubelet[1615]: E0710 00:45:43.811033 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.129:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 00:45:43.811000 audit[1648]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:43.811000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc298a6d0 a2=0 a3=1 items=0 ppid=1615 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:45:43.811000 audit[1649]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.811000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffccaa030 a2=0 a3=1 items=0 ppid=1615 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.811000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:45:43.812000 audit[1651]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:43.812000 audit[1651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffffdc1a590 a2=0 a3=1 items=0 ppid=1615 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:45:43.813711 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:45:43.813000 audit[1652]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:43.813000 audit[1652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc9c44500 a2=0 a3=1 items=0 ppid=1615 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.813000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:45:43.814000 audit[1653]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:43.814000 audit[1653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffded37a70 a2=0 a3=1 items=0 ppid=1615 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.814000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:45:43.821670 kubelet[1615]: E0710 00:45:43.821635 1615 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 00:45:43.820000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:43.820000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:45:43.820000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000daa6f0 a1=4000dd0ac8 a2=4000daa6c0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:43.820000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:45:43.821888 kubelet[1615]: E0710 00:45:43.821716 1615 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 00:45:43.822219 kubelet[1615]: I0710 00:45:43.822185 1615 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:45:43.822254 kubelet[1615]: I0710 00:45:43.822208 1615 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:45:43.822870 kubelet[1615]: I0710 00:45:43.822782 1615 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:45:43.823533 kubelet[1615]: E0710 00:45:43.823513 1615 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:45:43.823594 kubelet[1615]: E0710 00:45:43.823568 1615 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:45:43.911453 kubelet[1615]: E0710 00:45:43.910693 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.129:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.129:6443: connect: connection refused" interval="400ms" Jul 10 00:45:43.913288 kubelet[1615]: I0710 00:45:43.913264 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ff56b6c70c8b1586af1542213253716a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"ff56b6c70c8b1586af1542213253716a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:43.913462 kubelet[1615]: I0710 00:45:43.913443 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ff56b6c70c8b1586af1542213253716a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"ff56b6c70c8b1586af1542213253716a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:43.913577 kubelet[1615]: I0710 00:45:43.913558 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ff56b6c70c8b1586af1542213253716a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"ff56b6c70c8b1586af1542213253716a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:43.921174 systemd[1]: Created slice kubepods-burstable-podff56b6c70c8b1586af1542213253716a.slice. Jul 10 00:45:43.924284 kubelet[1615]: I0710 00:45:43.924257 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:45:43.924867 kubelet[1615]: E0710 00:45:43.924774 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.129:6443/api/v1/nodes\": dial tcp 10.0.0.129:6443: connect: connection refused" node="localhost" Jul 10 00:45:43.936249 kubelet[1615]: E0710 00:45:43.936093 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:43.938712 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 10 00:45:43.940090 kubelet[1615]: E0710 00:45:43.940068 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:43.956078 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 10 00:45:43.957450 kubelet[1615]: E0710 00:45:43.957426 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:44.014018 kubelet[1615]: I0710 00:45:44.013977 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:44.014135 kubelet[1615]: I0710 00:45:44.014038 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:44.014135 kubelet[1615]: I0710 00:45:44.014082 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:44.014135 kubelet[1615]: I0710 00:45:44.014114 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:44.014199 kubelet[1615]: I0710 00:45:44.014141 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:44.014199 kubelet[1615]: I0710 00:45:44.014169 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:44.126829 kubelet[1615]: I0710 00:45:44.126771 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:45:44.127157 kubelet[1615]: E0710 00:45:44.127118 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.129:6443/api/v1/nodes\": dial tcp 10.0.0.129:6443: connect: connection refused" node="localhost" Jul 10 00:45:44.237697 kubelet[1615]: E0710 00:45:44.237564 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:44.238743 env[1218]: time="2025-07-10T00:45:44.238694390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:ff56b6c70c8b1586af1542213253716a,Namespace:kube-system,Attempt:0,}" Jul 10 00:45:44.240957 kubelet[1615]: E0710 00:45:44.240925 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:44.241348 env[1218]: time="2025-07-10T00:45:44.241318110Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 10 00:45:44.258128 kubelet[1615]: E0710 00:45:44.258064 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:44.258545 env[1218]: time="2025-07-10T00:45:44.258491390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 10 00:45:44.311299 kubelet[1615]: E0710 00:45:44.311238 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.129:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.129:6443: connect: connection refused" interval="800ms" Jul 10 00:45:44.515348 kubelet[1615]: E0710 00:45:44.515206 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.129:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 00:45:44.528638 kubelet[1615]: I0710 00:45:44.528607 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:45:44.528952 kubelet[1615]: E0710 00:45:44.528929 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.129:6443/api/v1/nodes\": dial tcp 10.0.0.129:6443: connect: connection refused" node="localhost" Jul 10 00:45:44.721037 kubelet[1615]: E0710 00:45:44.720988 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.129:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 00:45:44.783960 kubelet[1615]: E0710 00:45:44.783849 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.129:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 00:45:44.817126 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount307146099.mount: Deactivated successfully. Jul 10 00:45:44.823368 env[1218]: time="2025-07-10T00:45:44.823320190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.824650 env[1218]: time="2025-07-10T00:45:44.824618630Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.825943 env[1218]: time="2025-07-10T00:45:44.825901030Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.826926 env[1218]: time="2025-07-10T00:45:44.826875470Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.828914 env[1218]: time="2025-07-10T00:45:44.828888150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.831389 env[1218]: time="2025-07-10T00:45:44.831360150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.834723 env[1218]: time="2025-07-10T00:45:44.834682990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.837165 env[1218]: time="2025-07-10T00:45:44.837129110Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.838804 env[1218]: time="2025-07-10T00:45:44.838776150Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.839648 env[1218]: time="2025-07-10T00:45:44.839607550Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.840343 env[1218]: time="2025-07-10T00:45:44.840313070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.841275 env[1218]: time="2025-07-10T00:45:44.841243790Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:44.864611 env[1218]: time="2025-07-10T00:45:44.864561550Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:44.864898 env[1218]: time="2025-07-10T00:45:44.864596150Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:44.864898 env[1218]: time="2025-07-10T00:45:44.864606950Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:44.864898 env[1218]: time="2025-07-10T00:45:44.864841910Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a3af031b6a8e06c3b151e618baed048a414cfb404df7c82a0f51b8d49b72b861 pid=1662 runtime=io.containerd.runc.v2 Jul 10 00:45:44.867708 env[1218]: time="2025-07-10T00:45:44.867553270Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:44.867708 env[1218]: time="2025-07-10T00:45:44.867590030Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:44.867708 env[1218]: time="2025-07-10T00:45:44.867613430Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:44.867865 env[1218]: time="2025-07-10T00:45:44.867749470Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a36d0706e1b950d87fc21258b6821199ef82103755af4e16e36dc1a6f16b54bb pid=1683 runtime=io.containerd.runc.v2 Jul 10 00:45:44.870731 env[1218]: time="2025-07-10T00:45:44.870009790Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:44.870731 env[1218]: time="2025-07-10T00:45:44.870049190Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:44.870731 env[1218]: time="2025-07-10T00:45:44.870059590Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:44.870731 env[1218]: time="2025-07-10T00:45:44.870174150Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3f408256aac25a8ca3a3ac3580926478fc5c4649fad48ba0d352c71e3370eaa1 pid=1691 runtime=io.containerd.runc.v2 Jul 10 00:45:44.876238 systemd[1]: Started cri-containerd-a3af031b6a8e06c3b151e618baed048a414cfb404df7c82a0f51b8d49b72b861.scope. Jul 10 00:45:44.889501 systemd[1]: Started cri-containerd-3f408256aac25a8ca3a3ac3580926478fc5c4649fad48ba0d352c71e3370eaa1.scope. Jul 10 00:45:44.890440 systemd[1]: Started cri-containerd-a36d0706e1b950d87fc21258b6821199ef82103755af4e16e36dc1a6f16b54bb.scope. Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.913000 audit: BPF prog-id=61 op=LOAD Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=1662 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133616630333162366138653036633362313531653631386261656430 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=1662 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133616630333162366138653036633362313531653631386261656430 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit: BPF prog-id=62 op=LOAD Jul 10 00:45:44.914000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=1662 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133616630333162366138653036633362313531653631386261656430 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit: BPF prog-id=63 op=LOAD Jul 10 00:45:44.914000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=1662 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133616630333162366138653036633362313531653631386261656430 Jul 10 00:45:44.914000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:45:44.914000 audit: BPF prog-id=62 op=UNLOAD Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.914000 audit: BPF prog-id=64 op=LOAD Jul 10 00:45:44.914000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=1662 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133616630333162366138653036633362313531653631386261656430 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit: BPF prog-id=65 op=LOAD Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1691 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366343038323536616163323561386361336133616333353830393236 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1691 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366343038323536616163323561386361336133616333353830393236 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.916000 audit: BPF prog-id=66 op=LOAD Jul 10 00:45:44.916000 audit[1715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1691 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366343038323536616163323561386361336133616333353830393236 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit: BPF prog-id=67 op=LOAD Jul 10 00:45:44.917000 audit[1715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1691 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366343038323536616163323561386361336133616333353830393236 Jul 10 00:45:44.917000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:45:44.917000 audit: BPF prog-id=66 op=UNLOAD Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.917000 audit: BPF prog-id=68 op=LOAD Jul 10 00:45:44.917000 audit[1715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1691 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366343038323536616163323561386361336133616333353830393236 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.924000 audit: BPF prog-id=69 op=LOAD Jul 10 00:45:44.925000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.925000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366430373036653162393530643837666332313235386236383231 Jul 10 00:45:44.925000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.925000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366430373036653162393530643837666332313235386236383231 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit: BPF prog-id=70 op=LOAD Jul 10 00:45:44.926000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366430373036653162393530643837666332313235386236383231 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.926000 audit: BPF prog-id=71 op=LOAD Jul 10 00:45:44.926000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366430373036653162393530643837666332313235386236383231 Jul 10 00:45:44.927000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:45:44.927000 audit: BPF prog-id=70 op=UNLOAD Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:44.927000 audit: BPF prog-id=72 op=LOAD Jul 10 00:45:44.927000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366430373036653162393530643837666332313235386236383231 Jul 10 00:45:44.943021 env[1218]: time="2025-07-10T00:45:44.942973270Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:ff56b6c70c8b1586af1542213253716a,Namespace:kube-system,Attempt:0,} returns sandbox id \"3f408256aac25a8ca3a3ac3580926478fc5c4649fad48ba0d352c71e3370eaa1\"" Jul 10 00:45:44.943672 env[1218]: time="2025-07-10T00:45:44.943623310Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"a3af031b6a8e06c3b151e618baed048a414cfb404df7c82a0f51b8d49b72b861\"" Jul 10 00:45:44.943974 kubelet[1615]: E0710 00:45:44.943943 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:44.946978 kubelet[1615]: E0710 00:45:44.946947 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:44.950929 env[1218]: time="2025-07-10T00:45:44.950892390Z" level=info msg="CreateContainer within sandbox \"3f408256aac25a8ca3a3ac3580926478fc5c4649fad48ba0d352c71e3370eaa1\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:45:44.951264 env[1218]: time="2025-07-10T00:45:44.951229590Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"a36d0706e1b950d87fc21258b6821199ef82103755af4e16e36dc1a6f16b54bb\"" Jul 10 00:45:44.951756 kubelet[1615]: E0710 00:45:44.951735 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:44.952692 env[1218]: time="2025-07-10T00:45:44.952655150Z" level=info msg="CreateContainer within sandbox \"a3af031b6a8e06c3b151e618baed048a414cfb404df7c82a0f51b8d49b72b861\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:45:44.954977 env[1218]: time="2025-07-10T00:45:44.954936990Z" level=info msg="CreateContainer within sandbox \"a36d0706e1b950d87fc21258b6821199ef82103755af4e16e36dc1a6f16b54bb\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:45:44.981957 env[1218]: time="2025-07-10T00:45:44.981887470Z" level=info msg="CreateContainer within sandbox \"a3af031b6a8e06c3b151e618baed048a414cfb404df7c82a0f51b8d49b72b861\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"aa112bbd4a74fb3ae80b5a357f993c2482190bb4791e1ee787666193f023beb3\"" Jul 10 00:45:44.982734 env[1218]: time="2025-07-10T00:45:44.982707670Z" level=info msg="StartContainer for \"aa112bbd4a74fb3ae80b5a357f993c2482190bb4791e1ee787666193f023beb3\"" Jul 10 00:45:44.984218 env[1218]: time="2025-07-10T00:45:44.984179990Z" level=info msg="CreateContainer within sandbox \"3f408256aac25a8ca3a3ac3580926478fc5c4649fad48ba0d352c71e3370eaa1\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"018460bea3583f28f75262aeb0fef94df23c1068bc4ef133ee6c24b57084ae17\"" Jul 10 00:45:44.984673 env[1218]: time="2025-07-10T00:45:44.984623510Z" level=info msg="StartContainer for \"018460bea3583f28f75262aeb0fef94df23c1068bc4ef133ee6c24b57084ae17\"" Jul 10 00:45:44.986244 env[1218]: time="2025-07-10T00:45:44.986202510Z" level=info msg="CreateContainer within sandbox \"a36d0706e1b950d87fc21258b6821199ef82103755af4e16e36dc1a6f16b54bb\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"18a649de43fa0721144cfa450789029d8104338209fecc6c7dd7e5b4d4250022\"" Jul 10 00:45:44.986578 env[1218]: time="2025-07-10T00:45:44.986551150Z" level=info msg="StartContainer for \"18a649de43fa0721144cfa450789029d8104338209fecc6c7dd7e5b4d4250022\"" Jul 10 00:45:45.001950 systemd[1]: Started cri-containerd-018460bea3583f28f75262aeb0fef94df23c1068bc4ef133ee6c24b57084ae17.scope. Jul 10 00:45:45.002793 systemd[1]: Started cri-containerd-18a649de43fa0721144cfa450789029d8104338209fecc6c7dd7e5b4d4250022.scope. Jul 10 00:45:45.013663 systemd[1]: Started cri-containerd-aa112bbd4a74fb3ae80b5a357f993c2482190bb4791e1ee787666193f023beb3.scope. Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit: BPF prog-id=73 op=LOAD Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1691 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383436306265613335383366323866373532363261656230666566 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1691 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383436306265613335383366323866373532363261656230666566 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit: BPF prog-id=74 op=LOAD Jul 10 00:45:45.074000 audit[1811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1691 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383436306265613335383366323866373532363261656230666566 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit: BPF prog-id=75 op=LOAD Jul 10 00:45:45.074000 audit[1811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1691 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383436306265613335383366323866373532363261656230666566 Jul 10 00:45:45.074000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:45:45.074000 audit: BPF prog-id=74 op=UNLOAD Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.074000 audit: BPF prog-id=76 op=LOAD Jul 10 00:45:45.074000 audit[1811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1691 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383436306265613335383366323866373532363261656230666566 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit: BPF prog-id=77 op=LOAD Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1662 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161313132626264346137346662336165383062356133353766393933 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1662 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161313132626264346137346662336165383062356133353766393933 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.081000 audit: BPF prog-id=78 op=LOAD Jul 10 00:45:45.081000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1662 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161313132626264346137346662336165383062356133353766393933 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit: BPF prog-id=79 op=LOAD Jul 10 00:45:45.082000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1662 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161313132626264346137346662336165383062356133353766393933 Jul 10 00:45:45.082000 audit: BPF prog-id=79 op=UNLOAD Jul 10 00:45:45.082000 audit: BPF prog-id=78 op=UNLOAD Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.082000 audit: BPF prog-id=80 op=LOAD Jul 10 00:45:45.082000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1662 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161313132626264346137346662336165383062356133353766393933 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.086000 audit: BPF prog-id=81 op=LOAD Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1683 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138613634396465343366613037323131343463666134353037383930 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1683 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138613634396465343366613037323131343463666134353037383930 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.087000 audit: BPF prog-id=82 op=LOAD Jul 10 00:45:45.087000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1683 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138613634396465343366613037323131343463666134353037383930 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.088000 audit: BPF prog-id=83 op=LOAD Jul 10 00:45:45.088000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1683 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138613634396465343366613037323131343463666134353037383930 Jul 10 00:45:45.089000 audit: BPF prog-id=83 op=UNLOAD Jul 10 00:45:45.089000 audit: BPF prog-id=82 op=UNLOAD Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:45.089000 audit: BPF prog-id=84 op=LOAD Jul 10 00:45:45.089000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1683 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:45.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138613634396465343366613037323131343463666134353037383930 Jul 10 00:45:45.112721 env[1218]: time="2025-07-10T00:45:45.110163230Z" level=info msg="StartContainer for \"018460bea3583f28f75262aeb0fef94df23c1068bc4ef133ee6c24b57084ae17\" returns successfully" Jul 10 00:45:45.112721 env[1218]: time="2025-07-10T00:45:45.111387150Z" level=info msg="StartContainer for \"aa112bbd4a74fb3ae80b5a357f993c2482190bb4791e1ee787666193f023beb3\" returns successfully" Jul 10 00:45:45.112865 kubelet[1615]: E0710 00:45:45.111967 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.129:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.129:6443: connect: connection refused" interval="1.6s" Jul 10 00:45:45.165893 env[1218]: time="2025-07-10T00:45:45.160852630Z" level=info msg="StartContainer for \"18a649de43fa0721144cfa450789029d8104338209fecc6c7dd7e5b4d4250022\" returns successfully" Jul 10 00:45:45.330762 kubelet[1615]: I0710 00:45:45.330662 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:45:45.330995 kubelet[1615]: E0710 00:45:45.330966 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.129:6443/api/v1/nodes\": dial tcp 10.0.0.129:6443: connect: connection refused" node="localhost" Jul 10 00:45:45.362591 kubelet[1615]: E0710 00:45:45.362551 1615 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.129:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.129:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 00:45:45.819225 kubelet[1615]: E0710 00:45:45.819141 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:45.819540 kubelet[1615]: E0710 00:45:45.819271 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:45.821192 kubelet[1615]: E0710 00:45:45.821167 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:45.821298 kubelet[1615]: E0710 00:45:45.821277 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:45.823068 kubelet[1615]: E0710 00:45:45.823048 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:45.823162 kubelet[1615]: E0710 00:45:45.823145 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:46.824750 kubelet[1615]: E0710 00:45:46.824707 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:46.825086 kubelet[1615]: E0710 00:45:46.824784 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:46.825086 kubelet[1615]: E0710 00:45:46.824856 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:46.825086 kubelet[1615]: E0710 00:45:46.824905 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:46.932777 kubelet[1615]: I0710 00:45:46.932738 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:45:46.940775 kubelet[1615]: E0710 00:45:46.940745 1615 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:45:46.940913 kubelet[1615]: E0710 00:45:46.940894 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:47.486838 kernel: kauditd_printk_skb: 561 callbacks suppressed Jul 10 00:45:47.486969 kernel: audit: type=1400 audit(1752108347.480:564): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.486996 kernel: audit: type=1300 audit(1752108347.480:564): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000137170 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:47.480000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.480000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000137170 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:47.480000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:47.492945 kernel: audit: type=1327 audit(1752108347.480:564): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:47.481000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.496313 kernel: audit: type=1400 audit(1752108347.481:565): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.496359 kernel: audit: type=1300 audit(1752108347.481:565): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005165c0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:47.481000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005165c0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:47.481000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:47.503374 kernel: audit: type=1327 audit(1752108347.481:565): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:47.723000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.723000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40085fc840 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.731593 kernel: audit: type=1400 audit(1752108347.723:566): avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.731698 kernel: audit: type=1300 audit(1752108347.723:566): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40085fc840 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.731734 kernel: audit: type=1327 audit(1752108347.723:566): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.723000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.723000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.738080 kernel: audit: type=1400 audit(1752108347.723:567): avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.723000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003ae7800 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.723000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.723000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6722 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.723000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40085fc8d0 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.723000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.725000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.725000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40085fcba0 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.727000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.727000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=4005886ec0 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.727000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:47.727000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40085fd410 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:45:47.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:47.787953 kubelet[1615]: E0710 00:45:47.787909 1615 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 10 00:45:47.969376 kubelet[1615]: I0710 00:45:47.969336 1615 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:45:48.009475 kubelet[1615]: I0710 00:45:48.009356 1615 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:48.015592 kubelet[1615]: E0710 00:45:48.015554 1615 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:48.015824 kubelet[1615]: I0710 00:45:48.015794 1615 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:48.017678 kubelet[1615]: E0710 00:45:48.017628 1615 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:48.017678 kubelet[1615]: I0710 00:45:48.017673 1615 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:48.019343 kubelet[1615]: E0710 00:45:48.019278 1615 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:48.693190 kubelet[1615]: I0710 00:45:48.693162 1615 apiserver.go:52] "Watching apiserver" Jul 10 00:45:48.711847 kubelet[1615]: I0710 00:45:48.711800 1615 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:45:49.751517 systemd[1]: Reloading. Jul 10 00:45:49.804259 /usr/lib/systemd/system-generators/torcx-generator[1929]: time="2025-07-10T00:45:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:45:49.804290 /usr/lib/systemd/system-generators/torcx-generator[1929]: time="2025-07-10T00:45:49Z" level=info msg="torcx already run" Jul 10 00:45:49.863473 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:45:49.863493 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:45:49.879669 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.942000 audit: BPF prog-id=85 op=LOAD Jul 10 00:45:49.942000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit: BPF prog-id=86 op=LOAD Jul 10 00:45:49.943000 audit: BPF prog-id=81 op=UNLOAD Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit: BPF prog-id=87 op=LOAD Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.943000 audit: BPF prog-id=88 op=LOAD Jul 10 00:45:49.943000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:45:49.943000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.945000 audit: BPF prog-id=89 op=LOAD Jul 10 00:45:49.945000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit: BPF prog-id=90 op=LOAD Jul 10 00:45:49.946000 audit: BPF prog-id=65 op=UNLOAD Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.946000 audit: BPF prog-id=91 op=LOAD Jul 10 00:45:49.946000 audit: BPF prog-id=73 op=UNLOAD Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit: BPF prog-id=92 op=LOAD Jul 10 00:45:49.947000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit: BPF prog-id=93 op=LOAD Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit: BPF prog-id=94 op=LOAD Jul 10 00:45:49.947000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:45:49.947000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.947000 audit: BPF prog-id=95 op=LOAD Jul 10 00:45:49.947000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.948000 audit: BPF prog-id=96 op=LOAD Jul 10 00:45:49.948000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit: BPF prog-id=97 op=LOAD Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit: BPF prog-id=98 op=LOAD Jul 10 00:45:49.949000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:45:49.949000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.949000 audit: BPF prog-id=99 op=LOAD Jul 10 00:45:49.949000 audit: BPF prog-id=69 op=UNLOAD Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit: BPF prog-id=100 op=LOAD Jul 10 00:45:49.950000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit: BPF prog-id=101 op=LOAD Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.950000 audit: BPF prog-id=102 op=LOAD Jul 10 00:45:49.950000 audit: BPF prog-id=58 op=UNLOAD Jul 10 00:45:49.950000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.951000 audit: BPF prog-id=103 op=LOAD Jul 10 00:45:49.951000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit: BPF prog-id=104 op=LOAD Jul 10 00:45:49.952000 audit: BPF prog-id=61 op=UNLOAD Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:49.953000 audit: BPF prog-id=105 op=LOAD Jul 10 00:45:49.953000 audit: BPF prog-id=77 op=UNLOAD Jul 10 00:45:49.964934 systemd[1]: Stopping kubelet.service... Jul 10 00:45:49.993184 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:45:49.993383 systemd[1]: Stopped kubelet.service. Jul 10 00:45:49.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:49.995538 systemd[1]: Starting kubelet.service... Jul 10 00:45:50.087793 systemd[1]: Started kubelet.service. Jul 10 00:45:50.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:50.122056 kubelet[1971]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:45:50.122056 kubelet[1971]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:45:50.122056 kubelet[1971]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:45:50.122492 kubelet[1971]: I0710 00:45:50.122121 1971 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:45:50.129425 kubelet[1971]: I0710 00:45:50.129391 1971 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 00:45:50.129425 kubelet[1971]: I0710 00:45:50.129421 1971 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:45:50.129628 kubelet[1971]: I0710 00:45:50.129604 1971 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 00:45:50.130972 kubelet[1971]: I0710 00:45:50.130948 1971 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 10 00:45:50.134214 kubelet[1971]: I0710 00:45:50.134041 1971 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:45:50.138422 kubelet[1971]: E0710 00:45:50.137686 1971 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:45:50.138422 kubelet[1971]: I0710 00:45:50.137716 1971 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:45:50.144262 kubelet[1971]: I0710 00:45:50.143916 1971 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:45:50.144262 kubelet[1971]: I0710 00:45:50.144145 1971 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:45:50.144840 kubelet[1971]: I0710 00:45:50.144168 1971 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:45:50.144948 kubelet[1971]: I0710 00:45:50.144858 1971 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:45:50.144948 kubelet[1971]: I0710 00:45:50.144871 1971 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 00:45:50.144948 kubelet[1971]: I0710 00:45:50.144916 1971 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:45:50.145079 kubelet[1971]: I0710 00:45:50.145064 1971 kubelet.go:480] "Attempting to sync node with API server" Jul 10 00:45:50.145107 kubelet[1971]: I0710 00:45:50.145080 1971 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:45:50.145107 kubelet[1971]: I0710 00:45:50.145103 1971 kubelet.go:386] "Adding apiserver pod source" Jul 10 00:45:50.146152 kubelet[1971]: I0710 00:45:50.146131 1971 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:45:50.147976 kubelet[1971]: I0710 00:45:50.147957 1971 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:45:50.151436 kubelet[1971]: I0710 00:45:50.151416 1971 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 00:45:50.157413 kubelet[1971]: I0710 00:45:50.156079 1971 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:45:50.157413 kubelet[1971]: I0710 00:45:50.156130 1971 server.go:1289] "Started kubelet" Jul 10 00:45:50.156000 audit[1971]: AVC avc: denied { mac_admin } for pid=1971 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:50.156000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:45:50.156000 audit[1971]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400094f980 a1=4000b54510 a2=400094f950 a3=25 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:50.156000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:45:50.156000 audit[1971]: AVC avc: denied { mac_admin } for pid=1971 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:50.156000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:45:50.156000 audit[1971]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a20d40 a1=4000b54528 a2=400094fa10 a3=25 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:50.156000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:45:50.158104 kubelet[1971]: I0710 00:45:50.157685 1971 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:45:50.158104 kubelet[1971]: I0710 00:45:50.157723 1971 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:45:50.158104 kubelet[1971]: I0710 00:45:50.157757 1971 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:45:50.168230 kubelet[1971]: I0710 00:45:50.167352 1971 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:45:50.169358 kubelet[1971]: I0710 00:45:50.169333 1971 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:45:50.169565 kubelet[1971]: E0710 00:45:50.169530 1971 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:45:50.171098 kubelet[1971]: I0710 00:45:50.169792 1971 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:45:50.171098 kubelet[1971]: I0710 00:45:50.169955 1971 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:45:50.171098 kubelet[1971]: E0710 00:45:50.170264 1971 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:45:50.171298 kubelet[1971]: I0710 00:45:50.171264 1971 factory.go:223] Registration of the systemd container factory successfully Jul 10 00:45:50.171442 kubelet[1971]: I0710 00:45:50.171410 1971 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:45:50.172893 kubelet[1971]: I0710 00:45:50.172863 1971 server.go:317] "Adding debug handlers to kubelet server" Jul 10 00:45:50.175841 kubelet[1971]: I0710 00:45:50.175165 1971 factory.go:223] Registration of the containerd container factory successfully Jul 10 00:45:50.177493 kubelet[1971]: I0710 00:45:50.177422 1971 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:45:50.185005 kubelet[1971]: I0710 00:45:50.184947 1971 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:45:50.187526 kubelet[1971]: I0710 00:45:50.185657 1971 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:45:50.191894 kubelet[1971]: I0710 00:45:50.191866 1971 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 00:45:50.194317 kubelet[1971]: I0710 00:45:50.194282 1971 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 00:45:50.194317 kubelet[1971]: I0710 00:45:50.194310 1971 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 00:45:50.194429 kubelet[1971]: I0710 00:45:50.194330 1971 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:45:50.194429 kubelet[1971]: I0710 00:45:50.194337 1971 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 00:45:50.194429 kubelet[1971]: E0710 00:45:50.194391 1971 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:45:50.209092 kubelet[1971]: I0710 00:45:50.209068 1971 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:45:50.209092 kubelet[1971]: I0710 00:45:50.209088 1971 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:45:50.209215 kubelet[1971]: I0710 00:45:50.209109 1971 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:45:50.209250 kubelet[1971]: I0710 00:45:50.209234 1971 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:45:50.209276 kubelet[1971]: I0710 00:45:50.209249 1971 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:45:50.209276 kubelet[1971]: I0710 00:45:50.209267 1971 policy_none.go:49] "None policy: Start" Jul 10 00:45:50.209276 kubelet[1971]: I0710 00:45:50.209275 1971 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:45:50.209352 kubelet[1971]: I0710 00:45:50.209285 1971 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:45:50.209401 kubelet[1971]: I0710 00:45:50.209388 1971 state_mem.go:75] "Updated machine memory state" Jul 10 00:45:50.212274 kubelet[1971]: E0710 00:45:50.212255 1971 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 00:45:50.211000 audit[1971]: AVC avc: denied { mac_admin } for pid=1971 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:50.211000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:45:50.211000 audit[1971]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ce1a10 a1=400110f0b0 a2=4000ce19e0 a3=25 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:50.211000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:45:50.212552 kubelet[1971]: E0710 00:45:50.212306 1971 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 00:45:50.212552 kubelet[1971]: I0710 00:45:50.212445 1971 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:45:50.212552 kubelet[1971]: I0710 00:45:50.212458 1971 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:45:50.213034 kubelet[1971]: I0710 00:45:50.213016 1971 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:45:50.214462 kubelet[1971]: E0710 00:45:50.214441 1971 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:45:50.295290 kubelet[1971]: I0710 00:45:50.295254 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:50.295544 kubelet[1971]: I0710 00:45:50.295265 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:50.295618 kubelet[1971]: I0710 00:45:50.295389 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:50.317147 kubelet[1971]: I0710 00:45:50.317121 1971 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:45:50.336832 kubelet[1971]: I0710 00:45:50.334170 1971 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 10 00:45:50.336832 kubelet[1971]: I0710 00:45:50.334275 1971 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:45:50.476444 kubelet[1971]: I0710 00:45:50.476329 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ff56b6c70c8b1586af1542213253716a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"ff56b6c70c8b1586af1542213253716a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:50.476614 kubelet[1971]: I0710 00:45:50.476590 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ff56b6c70c8b1586af1542213253716a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"ff56b6c70c8b1586af1542213253716a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:50.476690 kubelet[1971]: I0710 00:45:50.476675 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:50.476755 kubelet[1971]: I0710 00:45:50.476743 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:50.476866 kubelet[1971]: I0710 00:45:50.476851 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:50.476956 kubelet[1971]: I0710 00:45:50.476941 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ff56b6c70c8b1586af1542213253716a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"ff56b6c70c8b1586af1542213253716a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:45:50.477147 kubelet[1971]: I0710 00:45:50.477080 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:50.477270 kubelet[1971]: I0710 00:45:50.477153 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:50.477360 kubelet[1971]: I0710 00:45:50.477309 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:45:50.567000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:45:50.567000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40009deb00 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:50.567000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:50.604799 kubelet[1971]: E0710 00:45:50.604757 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:50.604926 kubelet[1971]: E0710 00:45:50.604832 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:50.604984 kubelet[1971]: E0710 00:45:50.604962 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:51.146540 kubelet[1971]: I0710 00:45:51.146498 1971 apiserver.go:52] "Watching apiserver" Jul 10 00:45:51.170160 kubelet[1971]: I0710 00:45:51.170129 1971 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:45:51.204935 kubelet[1971]: I0710 00:45:51.204903 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:51.205641 kubelet[1971]: E0710 00:45:51.205434 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:51.206188 kubelet[1971]: E0710 00:45:51.206163 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:51.213014 kubelet[1971]: E0710 00:45:51.212981 1971 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:45:51.213136 kubelet[1971]: E0710 00:45:51.213114 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:51.232943 kubelet[1971]: I0710 00:45:51.232874 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.23285787 podStartE2EDuration="1.23285787s" podCreationTimestamp="2025-07-10 00:45:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:45:51.22585559 +0000 UTC m=+1.134106121" watchObservedRunningTime="2025-07-10 00:45:51.23285787 +0000 UTC m=+1.141108441" Jul 10 00:45:51.242595 kubelet[1971]: I0710 00:45:51.242536 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.24252103 podStartE2EDuration="1.24252103s" podCreationTimestamp="2025-07-10 00:45:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:45:51.23312707 +0000 UTC m=+1.141377561" watchObservedRunningTime="2025-07-10 00:45:51.24252103 +0000 UTC m=+1.150771561" Jul 10 00:45:51.252650 kubelet[1971]: I0710 00:45:51.252583 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.25256643 podStartE2EDuration="1.25256643s" podCreationTimestamp="2025-07-10 00:45:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:45:51.24326843 +0000 UTC m=+1.151518921" watchObservedRunningTime="2025-07-10 00:45:51.25256643 +0000 UTC m=+1.160816921" Jul 10 00:45:52.206343 kubelet[1971]: E0710 00:45:52.206302 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:52.206864 kubelet[1971]: E0710 00:45:52.206841 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:53.207000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.209260 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 10 00:45:53.209326 kernel: audit: type=1400 audit(1752108353.207:822): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.207000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013f9a60 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.215803 kernel: audit: type=1300 audit(1752108353.207:822): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013f9a60 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.215867 kernel: audit: type=1327 audit(1752108353.207:822): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:53.207000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:53.210000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.221667 kernel: audit: type=1400 audit(1752108353.210:823): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.221711 kernel: audit: type=1300 audit(1752108353.210:823): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a08f60 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.210000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a08f60 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:53.228591 kernel: audit: type=1327 audit(1752108353.210:823): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:53.228638 kernel: audit: type=1400 audit(1752108353.211:824): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.211000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.211000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a08fa0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.235329 kernel: audit: type=1300 audit(1752108353.211:824): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a08fa0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.235376 kernel: audit: type=1327 audit(1752108353.211:824): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:53.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:53.211000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.241516 kernel: audit: type=1400 audit(1752108353.211:825): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:53.211000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a08fe0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:45:53.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:55.242762 kubelet[1971]: I0710 00:45:55.242715 1971 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:45:55.243147 env[1218]: time="2025-07-10T00:45:55.243032675Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:45:55.243353 kubelet[1971]: I0710 00:45:55.243221 1971 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:45:55.829135 kubelet[1971]: E0710 00:45:55.829092 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:56.212955 kubelet[1971]: E0710 00:45:56.212844 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:56.231672 systemd[1]: Created slice kubepods-besteffort-pod871d9d1f_6796_4629_98c9_1fdf02320a2e.slice. Jul 10 00:45:56.318934 kubelet[1971]: I0710 00:45:56.318890 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/871d9d1f-6796-4629-98c9-1fdf02320a2e-kube-proxy\") pod \"kube-proxy-sp226\" (UID: \"871d9d1f-6796-4629-98c9-1fdf02320a2e\") " pod="kube-system/kube-proxy-sp226" Jul 10 00:45:56.319317 kubelet[1971]: I0710 00:45:56.319297 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/871d9d1f-6796-4629-98c9-1fdf02320a2e-xtables-lock\") pod \"kube-proxy-sp226\" (UID: \"871d9d1f-6796-4629-98c9-1fdf02320a2e\") " pod="kube-system/kube-proxy-sp226" Jul 10 00:45:56.319413 kubelet[1971]: I0710 00:45:56.319398 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/871d9d1f-6796-4629-98c9-1fdf02320a2e-lib-modules\") pod \"kube-proxy-sp226\" (UID: \"871d9d1f-6796-4629-98c9-1fdf02320a2e\") " pod="kube-system/kube-proxy-sp226" Jul 10 00:45:56.319496 kubelet[1971]: I0710 00:45:56.319479 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7f65z\" (UniqueName: \"kubernetes.io/projected/871d9d1f-6796-4629-98c9-1fdf02320a2e-kube-api-access-7f65z\") pod \"kube-proxy-sp226\" (UID: \"871d9d1f-6796-4629-98c9-1fdf02320a2e\") " pod="kube-system/kube-proxy-sp226" Jul 10 00:45:56.427449 kubelet[1971]: I0710 00:45:56.427418 1971 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:45:56.512385 systemd[1]: Created slice kubepods-besteffort-podbba88aa3_97a1_43b7_89df_2e823b68dc2a.slice. Jul 10 00:45:56.520716 kubelet[1971]: I0710 00:45:56.520665 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/bba88aa3-97a1-43b7-89df-2e823b68dc2a-var-lib-calico\") pod \"tigera-operator-747864d56d-dmx5c\" (UID: \"bba88aa3-97a1-43b7-89df-2e823b68dc2a\") " pod="tigera-operator/tigera-operator-747864d56d-dmx5c" Jul 10 00:45:56.520716 kubelet[1971]: I0710 00:45:56.520706 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jkzck\" (UniqueName: \"kubernetes.io/projected/bba88aa3-97a1-43b7-89df-2e823b68dc2a-kube-api-access-jkzck\") pod \"tigera-operator-747864d56d-dmx5c\" (UID: \"bba88aa3-97a1-43b7-89df-2e823b68dc2a\") " pod="tigera-operator/tigera-operator-747864d56d-dmx5c" Jul 10 00:45:56.547369 kubelet[1971]: E0710 00:45:56.547310 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:56.548267 env[1218]: time="2025-07-10T00:45:56.547933560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-sp226,Uid:871d9d1f-6796-4629-98c9-1fdf02320a2e,Namespace:kube-system,Attempt:0,}" Jul 10 00:45:56.564077 env[1218]: time="2025-07-10T00:45:56.564006152Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:56.564077 env[1218]: time="2025-07-10T00:45:56.564053872Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:56.564284 env[1218]: time="2025-07-10T00:45:56.564224753Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:56.564917 env[1218]: time="2025-07-10T00:45:56.564510914Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c3698ce109b46b7da91603f664440a4d01f5c0bf17bab60a76499e2ae91cc78 pid=2032 runtime=io.containerd.runc.v2 Jul 10 00:45:56.578548 systemd[1]: Started cri-containerd-3c3698ce109b46b7da91603f664440a4d01f5c0bf17bab60a76499e2ae91cc78.scope. Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.595000 audit: BPF prog-id=106 op=LOAD Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2032 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363333639386365313039623436623764613931363033663636343434 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2032 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363333639386365313039623436623764613931363033663636343434 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.596000 audit: BPF prog-id=107 op=LOAD Jul 10 00:45:56.596000 audit[2042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2032 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363333639386365313039623436623764613931363033663636343434 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.597000 audit: BPF prog-id=108 op=LOAD Jul 10 00:45:56.597000 audit[2042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2032 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363333639386365313039623436623764613931363033663636343434 Jul 10 00:45:56.597000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:45:56.597000 audit: BPF prog-id=107 op=UNLOAD Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { perfmon } for pid=2042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit[2042]: AVC avc: denied { bpf } for pid=2042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.598000 audit: BPF prog-id=109 op=LOAD Jul 10 00:45:56.598000 audit[2042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2032 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363333639386365313039623436623764613931363033663636343434 Jul 10 00:45:56.612498 env[1218]: time="2025-07-10T00:45:56.612454729Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-sp226,Uid:871d9d1f-6796-4629-98c9-1fdf02320a2e,Namespace:kube-system,Attempt:0,} returns sandbox id \"3c3698ce109b46b7da91603f664440a4d01f5c0bf17bab60a76499e2ae91cc78\"" Jul 10 00:45:56.613233 kubelet[1971]: E0710 00:45:56.613212 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:56.619040 env[1218]: time="2025-07-10T00:45:56.618991639Z" level=info msg="CreateContainer within sandbox \"3c3698ce109b46b7da91603f664440a4d01f5c0bf17bab60a76499e2ae91cc78\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:45:56.634094 env[1218]: time="2025-07-10T00:45:56.634054146Z" level=info msg="CreateContainer within sandbox \"3c3698ce109b46b7da91603f664440a4d01f5c0bf17bab60a76499e2ae91cc78\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2a03e783f444d2a7db31fb49c1a98adc8ec89e42d7116e43636affdede9d05f6\"" Jul 10 00:45:56.635603 env[1218]: time="2025-07-10T00:45:56.634700429Z" level=info msg="StartContainer for \"2a03e783f444d2a7db31fb49c1a98adc8ec89e42d7116e43636affdede9d05f6\"" Jul 10 00:45:56.650899 systemd[1]: Started cri-containerd-2a03e783f444d2a7db31fb49c1a98adc8ec89e42d7116e43636affdede9d05f6.scope. Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2032 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303365373833663434346432613764623331666234396331613938 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit: BPF prog-id=110 op=LOAD Jul 10 00:45:56.687000 audit[2073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2032 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303365373833663434346432613764623331666234396331613938 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit: BPF prog-id=111 op=LOAD Jul 10 00:45:56.687000 audit[2073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2032 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303365373833663434346432613764623331666234396331613938 Jul 10 00:45:56.687000 audit: BPF prog-id=111 op=UNLOAD Jul 10 00:45:56.687000 audit: BPF prog-id=110 op=UNLOAD Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.687000 audit: BPF prog-id=112 op=LOAD Jul 10 00:45:56.687000 audit[2073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2032 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303365373833663434346432613764623331666234396331613938 Jul 10 00:45:56.710331 env[1218]: time="2025-07-10T00:45:56.710271328Z" level=info msg="StartContainer for \"2a03e783f444d2a7db31fb49c1a98adc8ec89e42d7116e43636affdede9d05f6\" returns successfully" Jul 10 00:45:56.814986 env[1218]: time="2025-07-10T00:45:56.814875958Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-dmx5c,Uid:bba88aa3-97a1-43b7-89df-2e823b68dc2a,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:45:56.838944 env[1218]: time="2025-07-10T00:45:56.838886466Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:56.839104 env[1218]: time="2025-07-10T00:45:56.838926026Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:56.839104 env[1218]: time="2025-07-10T00:45:56.838936426Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:56.839104 env[1218]: time="2025-07-10T00:45:56.839056707Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8 pid=2110 runtime=io.containerd.runc.v2 Jul 10 00:45:56.863176 systemd[1]: Started cri-containerd-cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8.scope. Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.880000 audit: BPF prog-id=113 op=LOAD Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2110 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364326363313762616632386261303237393835653634363962653337 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2110 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364326363313762616632386261303237393835653634363962653337 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit: BPF prog-id=114 op=LOAD Jul 10 00:45:56.881000 audit[2119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2110 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364326363313762616632386261303237393835653634363962653337 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit: BPF prog-id=115 op=LOAD Jul 10 00:45:56.881000 audit[2119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2110 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364326363313762616632386261303237393835653634363962653337 Jul 10 00:45:56.881000 audit: BPF prog-id=115 op=UNLOAD Jul 10 00:45:56.881000 audit: BPF prog-id=114 op=UNLOAD Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { perfmon } for pid=2119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit[2119]: AVC avc: denied { bpf } for pid=2119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:56.881000 audit: BPF prog-id=116 op=LOAD Jul 10 00:45:56.881000 audit[2119]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2110 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364326363313762616632386261303237393835653634363962653337 Jul 10 00:45:56.901943 env[1218]: time="2025-07-10T00:45:56.901905309Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-dmx5c,Uid:bba88aa3-97a1-43b7-89df-2e823b68dc2a,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8\"" Jul 10 00:45:56.903332 env[1218]: time="2025-07-10T00:45:56.903307675Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:45:56.945000 audit[2178]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:56.945000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe234b380 a2=0 a3=1 items=0 ppid=2084 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:45:56.945000 audit[2179]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:56.945000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffcb2d310 a2=0 a3=1 items=0 ppid=2084 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.945000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:45:56.946000 audit[2183]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:56.946000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff330b080 a2=0 a3=1 items=0 ppid=2084 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:45:56.949000 audit[2184]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:56.949000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe830a0f0 a2=0 a3=1 items=0 ppid=2084 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.949000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:45:56.950000 audit[2182]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:56.950000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff339be60 a2=0 a3=1 items=0 ppid=2084 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.950000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:45:56.952000 audit[2185]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:56.952000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf5b91d0 a2=0 a3=1 items=0 ppid=2084 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.952000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:45:57.048000 audit[2187]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.048000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd31cadc0 a2=0 a3=1 items=0 ppid=2084 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.048000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:45:57.053000 audit[2189]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.053000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff74daf10 a2=0 a3=1 items=0 ppid=2084 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.053000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:45:57.059000 audit[2192]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.059000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe8eff6b0 a2=0 a3=1 items=0 ppid=2084 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:45:57.060000 audit[2193]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.060000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc85d9bb0 a2=0 a3=1 items=0 ppid=2084 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:45:57.062000 audit[2195]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.062000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe35d8800 a2=0 a3=1 items=0 ppid=2084 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.062000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:45:57.063000 audit[2196]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.063000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffea9caf0 a2=0 a3=1 items=0 ppid=2084 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:45:57.066000 audit[2198]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.066000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff05dc540 a2=0 a3=1 items=0 ppid=2084 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:45:57.070000 audit[2201]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.070000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc37ae420 a2=0 a3=1 items=0 ppid=2084 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.070000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:45:57.071000 audit[2202]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.071000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5871270 a2=0 a3=1 items=0 ppid=2084 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:45:57.073000 audit[2204]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.073000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd41a8b20 a2=0 a3=1 items=0 ppid=2084 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:45:57.074000 audit[2205]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.074000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe49bc780 a2=0 a3=1 items=0 ppid=2084 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.074000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:45:57.077000 audit[2207]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.077000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff5330f60 a2=0 a3=1 items=0 ppid=2084 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:45:57.080000 audit[2210]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.080000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc69ce660 a2=0 a3=1 items=0 ppid=2084 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:45:57.084000 audit[2213]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.084000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc5e6fb0 a2=0 a3=1 items=0 ppid=2084 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.084000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:45:57.085000 audit[2214]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.085000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc2133e70 a2=0 a3=1 items=0 ppid=2084 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.085000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:45:57.088000 audit[2216]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.088000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffcc861000 a2=0 a3=1 items=0 ppid=2084 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:45:57.091000 audit[2219]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.091000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffa94fea0 a2=0 a3=1 items=0 ppid=2084 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:45:57.093000 audit[2220]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.093000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2fdc430 a2=0 a3=1 items=0 ppid=2084 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:45:57.097000 audit[2223]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:45:57.097000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc24fa320 a2=0 a3=1 items=0 ppid=2084 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:45:57.123000 audit[2229]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:57.123000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe1e76b10 a2=0 a3=1 items=0 ppid=2084 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.123000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:57.137000 audit[2229]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:57.137000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe1e76b10 a2=0 a3=1 items=0 ppid=2084 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.137000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:57.139000 audit[2234]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.139000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcddd83d0 a2=0 a3=1 items=0 ppid=2084 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.139000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:45:57.141000 audit[2236]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.141000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc2fa0250 a2=0 a3=1 items=0 ppid=2084 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.141000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:45:57.145000 audit[2239]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.145000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe7c58c90 a2=0 a3=1 items=0 ppid=2084 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:45:57.146000 audit[2240]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.146000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff297ce10 a2=0 a3=1 items=0 ppid=2084 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:45:57.148000 audit[2242]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.148000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe6e3dad0 a2=0 a3=1 items=0 ppid=2084 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.148000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:45:57.149000 audit[2243]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.149000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe337a400 a2=0 a3=1 items=0 ppid=2084 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.149000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:45:57.151000 audit[2245]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.151000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd9c038a0 a2=0 a3=1 items=0 ppid=2084 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:45:57.155000 audit[2248]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.155000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe7892a20 a2=0 a3=1 items=0 ppid=2084 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.155000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:45:57.156000 audit[2249]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.156000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdbb6d580 a2=0 a3=1 items=0 ppid=2084 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:45:57.158000 audit[2251]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.158000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffbc31560 a2=0 a3=1 items=0 ppid=2084 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.158000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:45:57.159000 audit[2252]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.159000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9d2b700 a2=0 a3=1 items=0 ppid=2084 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:45:57.161000 audit[2254]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.161000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe062fb00 a2=0 a3=1 items=0 ppid=2084 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.161000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:45:57.165000 audit[2257]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.165000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdef1dc10 a2=0 a3=1 items=0 ppid=2084 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.165000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:45:57.168000 audit[2260]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.168000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc624f010 a2=0 a3=1 items=0 ppid=2084 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.168000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:45:57.169000 audit[2261]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.169000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd364de80 a2=0 a3=1 items=0 ppid=2084 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:45:57.171000 audit[2263]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.171000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd4cb1f20 a2=0 a3=1 items=0 ppid=2084 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.171000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:45:57.174000 audit[2266]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.174000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc76385e0 a2=0 a3=1 items=0 ppid=2084 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.174000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:45:57.175000 audit[2267]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.175000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd42809c0 a2=0 a3=1 items=0 ppid=2084 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.175000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:45:57.177000 audit[2269]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.177000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe110c540 a2=0 a3=1 items=0 ppid=2084 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:45:57.178000 audit[2270]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.178000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef8ad830 a2=0 a3=1 items=0 ppid=2084 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:45:57.180000 audit[2272]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.180000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcec439b0 a2=0 a3=1 items=0 ppid=2084 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:45:57.184000 audit[2275]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:45:57.184000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc816a4f0 a2=0 a3=1 items=0 ppid=2084 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:45:57.186000 audit[2277]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:45:57.186000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffe97aaed0 a2=0 a3=1 items=0 ppid=2084 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.186000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:57.187000 audit[2277]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:45:57.187000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe97aaed0 a2=0 a3=1 items=0 ppid=2084 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.187000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:57.216644 kubelet[1971]: E0710 00:45:57.216489 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:57.225888 kubelet[1971]: I0710 00:45:57.225836 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-sp226" podStartSLOduration=1.2258247 podStartE2EDuration="1.2258247s" podCreationTimestamp="2025-07-10 00:45:56 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:45:57.225437018 +0000 UTC m=+7.133687549" watchObservedRunningTime="2025-07-10 00:45:57.2258247 +0000 UTC m=+7.134075231" Jul 10 00:45:57.848125 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3092973607.mount: Deactivated successfully. Jul 10 00:45:58.099646 kubelet[1971]: E0710 00:45:58.099542 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:58.217805 kubelet[1971]: E0710 00:45:58.217770 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:58.398329 env[1218]: time="2025-07-10T00:45:58.398221609Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:58.399636 env[1218]: time="2025-07-10T00:45:58.399608815Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:58.401310 env[1218]: time="2025-07-10T00:45:58.401270901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:58.402870 env[1218]: time="2025-07-10T00:45:58.402840468Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:58.403319 env[1218]: time="2025-07-10T00:45:58.403295069Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 10 00:45:58.410266 env[1218]: time="2025-07-10T00:45:58.410225377Z" level=info msg="CreateContainer within sandbox \"cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:45:58.418271 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount337119749.mount: Deactivated successfully. Jul 10 00:45:58.421586 env[1218]: time="2025-07-10T00:45:58.421544741Z" level=info msg="CreateContainer within sandbox \"cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0\"" Jul 10 00:45:58.422123 env[1218]: time="2025-07-10T00:45:58.422096144Z" level=info msg="StartContainer for \"7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0\"" Jul 10 00:45:58.448055 systemd[1]: run-containerd-runc-k8s.io-7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0-runc.DxLMzR.mount: Deactivated successfully. Jul 10 00:45:58.449491 systemd[1]: Started cri-containerd-7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0.scope. Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.478297 kernel: kauditd_printk_skb: 312 callbacks suppressed Jul 10 00:45:58.478335 kernel: audit: type=1400 audit(1752108358.476:919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.483111 kernel: audit: type=1400 audit(1752108358.476:920): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.483165 kernel: audit: type=1400 audit(1752108358.476:921): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.487984 kernel: audit: type=1400 audit(1752108358.476:922): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.488033 kernel: audit: type=1400 audit(1752108358.476:923): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.493033 kernel: audit: type=1400 audit(1752108358.476:924): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.493085 kernel: audit: type=1400 audit(1752108358.476:925): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.497836 kernel: audit: type=1400 audit(1752108358.476:926): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.497890 kernel: audit: type=1400 audit(1752108358.476:927): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.502836 kernel: audit: type=1400 audit(1752108358.477:928): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit: BPF prog-id=117 op=LOAD Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2110 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:58.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343631613665366632373637613062343930333664346234363136 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2110 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:58.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343631613665366632373637613062343930333664346234363136 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.477000 audit: BPF prog-id=118 op=LOAD Jul 10 00:45:58.477000 audit[2285]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2110 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:58.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343631613665366632373637613062343930333664346234363136 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.479000 audit: BPF prog-id=119 op=LOAD Jul 10 00:45:58.479000 audit[2285]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2110 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:58.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343631613665366632373637613062343930333664346234363136 Jul 10 00:45:58.482000 audit: BPF prog-id=119 op=UNLOAD Jul 10 00:45:58.482000 audit: BPF prog-id=118 op=UNLOAD Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:58.482000 audit: BPF prog-id=120 op=LOAD Jul 10 00:45:58.482000 audit[2285]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2110 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:58.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343631613665366632373637613062343930333664346234363136 Jul 10 00:45:58.509057 env[1218]: time="2025-07-10T00:45:58.508855526Z" level=info msg="StartContainer for \"7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0\" returns successfully" Jul 10 00:45:59.221320 kubelet[1971]: E0710 00:45:59.221288 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:59.994544 kubelet[1971]: E0710 00:45:59.994510 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:00.019421 kubelet[1971]: I0710 00:46:00.019341 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-dmx5c" podStartSLOduration=2.517753069 podStartE2EDuration="4.01932575s" podCreationTimestamp="2025-07-10 00:45:56 +0000 UTC" firstStartedPulling="2025-07-10 00:45:56.902860753 +0000 UTC m=+6.811111284" lastFinishedPulling="2025-07-10 00:45:58.404433434 +0000 UTC m=+8.312683965" observedRunningTime="2025-07-10 00:45:59.25573669 +0000 UTC m=+9.163987221" watchObservedRunningTime="2025-07-10 00:46:00.01932575 +0000 UTC m=+9.927576241" Jul 10 00:46:00.222713 kubelet[1971]: E0710 00:46:00.222669 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:00.478008 systemd[1]: cri-containerd-7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0.scope: Deactivated successfully. Jul 10 00:46:00.477000 audit: BPF prog-id=117 op=UNLOAD Jul 10 00:46:00.481000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:46:00.502105 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0-rootfs.mount: Deactivated successfully. Jul 10 00:46:00.604449 env[1218]: time="2025-07-10T00:46:00.604396819Z" level=info msg="shim disconnected" id=7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0 Jul 10 00:46:00.604449 env[1218]: time="2025-07-10T00:46:00.604446779Z" level=warning msg="cleaning up after shim disconnected" id=7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0 namespace=k8s.io Jul 10 00:46:00.604972 env[1218]: time="2025-07-10T00:46:00.604459739Z" level=info msg="cleaning up dead shim" Jul 10 00:46:00.619946 env[1218]: time="2025-07-10T00:46:00.619891913Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:46:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2329 runtime=io.containerd.runc.v2\n" Jul 10 00:46:01.226003 kubelet[1971]: E0710 00:46:01.225971 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:01.226451 kubelet[1971]: I0710 00:46:01.226428 1971 scope.go:117] "RemoveContainer" containerID="7b461a6e6f2767a0b49036d4b4616b991eeadfbff1b2bfe3b74d23a33416aec0" Jul 10 00:46:01.228030 env[1218]: time="2025-07-10T00:46:01.227986932Z" level=info msg="CreateContainer within sandbox \"cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 10 00:46:01.241304 env[1218]: time="2025-07-10T00:46:01.241231495Z" level=info msg="CreateContainer within sandbox \"cd2cc17baf28ba027985e6469be37b200cb1ebbf8bca09f304b7bb6c189a12c8\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"aa2847a7b20e61ce886ba4a159213ea61bd07c6c9ee8500ad69fe2f8e4f90dd3\"" Jul 10 00:46:01.242016 env[1218]: time="2025-07-10T00:46:01.241985458Z" level=info msg="StartContainer for \"aa2847a7b20e61ce886ba4a159213ea61bd07c6c9ee8500ad69fe2f8e4f90dd3\"" Jul 10 00:46:01.264770 systemd[1]: Started cri-containerd-aa2847a7b20e61ce886ba4a159213ea61bd07c6c9ee8500ad69fe2f8e4f90dd3.scope. Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit: BPF prog-id=121 op=LOAD Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2110 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:01.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323834376137623230653631636538383662613461313539323133 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2110 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:01.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323834376137623230653631636538383662613461313539323133 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit: BPF prog-id=122 op=LOAD Jul 10 00:46:01.322000 audit[2378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2110 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:01.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323834376137623230653631636538383662613461313539323133 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit: BPF prog-id=123 op=LOAD Jul 10 00:46:01.322000 audit[2378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2110 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:01.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323834376137623230653631636538383662613461313539323133 Jul 10 00:46:01.322000 audit: BPF prog-id=123 op=UNLOAD Jul 10 00:46:01.322000 audit: BPF prog-id=122 op=UNLOAD Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { perfmon } for pid=2378 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit[2378]: AVC avc: denied { bpf } for pid=2378 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:01.322000 audit: BPF prog-id=124 op=LOAD Jul 10 00:46:01.322000 audit[2378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2110 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:01.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323834376137623230653631636538383662613461313539323133 Jul 10 00:46:01.339688 env[1218]: time="2025-07-10T00:46:01.339636055Z" level=info msg="StartContainer for \"aa2847a7b20e61ce886ba4a159213ea61bd07c6c9ee8500ad69fe2f8e4f90dd3\" returns successfully" Jul 10 00:46:03.954640 sudo[1355]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:03.953000 audit[1355]: USER_END pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.955550 kernel: kauditd_printk_skb: 106 callbacks suppressed Jul 10 00:46:03.955618 kernel: audit: type=1106 audit(1752108363.953:957): pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.953000 audit[1355]: CRED_DISP pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.961448 kernel: audit: type=1104 audit(1752108363.953:958): pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.963172 sshd[1352]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:03.963000 audit[1352]: USER_END pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:03.963000 audit[1352]: CRED_DISP pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:03.971044 systemd[1]: sshd@6-10.0.0.129:22-10.0.0.1:37690.service: Deactivated successfully. Jul 10 00:46:03.971823 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:46:03.971985 systemd[1]: session-7.scope: Consumed 8.383s CPU time. Jul 10 00:46:03.972436 systemd-logind[1206]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:46:03.972964 kernel: audit: type=1106 audit(1752108363.963:959): pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:03.973003 kernel: audit: type=1104 audit(1752108363.963:960): pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:03.973025 kernel: audit: type=1131 audit(1752108363.970:961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.129:22-10.0.0.1:37690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.129:22-10.0.0.1:37690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.973499 systemd-logind[1206]: Removed session 7. Jul 10 00:46:04.464749 update_engine[1211]: I0710 00:46:04.464697 1211 update_attempter.cc:509] Updating boot flags... Jul 10 00:46:05.464000 audit[2447]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:05.468873 kernel: audit: type=1325 audit(1752108365.464:962): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:05.468960 kernel: audit: type=1300 audit(1752108365.464:962): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdf04d5f0 a2=0 a3=1 items=0 ppid=2084 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:05.464000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdf04d5f0 a2=0 a3=1 items=0 ppid=2084 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:05.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:05.474728 kernel: audit: type=1327 audit(1752108365.464:962): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:05.474802 kernel: audit: type=1325 audit(1752108365.473:963): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:05.473000 audit[2447]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:05.473000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf04d5f0 a2=0 a3=1 items=0 ppid=2084 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:05.481495 kernel: audit: type=1300 audit(1752108365.473:963): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf04d5f0 a2=0 a3=1 items=0 ppid=2084 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:05.473000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:05.499000 audit[2449]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:05.499000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcc574ba0 a2=0 a3=1 items=0 ppid=2084 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:05.499000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:05.506000 audit[2449]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:05.506000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcc574ba0 a2=0 a3=1 items=0 ppid=2084 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:05.506000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.851000 audit[2451]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.854882 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:46:09.854975 kernel: audit: type=1325 audit(1752108369.851:966): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.855002 kernel: audit: type=1300 audit(1752108369.851:966): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdbe8fad0 a2=0 a3=1 items=0 ppid=2084 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.851000 audit[2451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdbe8fad0 a2=0 a3=1 items=0 ppid=2084 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.860750 kernel: audit: type=1327 audit(1752108369.851:966): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.863000 audit[2451]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.863000 audit[2451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdbe8fad0 a2=0 a3=1 items=0 ppid=2084 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.869819 kernel: audit: type=1325 audit(1752108369.863:967): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.869885 kernel: audit: type=1300 audit(1752108369.863:967): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdbe8fad0 a2=0 a3=1 items=0 ppid=2084 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.869907 kernel: audit: type=1327 audit(1752108369.863:967): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.878000 audit[2453]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.878000 audit[2453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdfe40af0 a2=0 a3=1 items=0 ppid=2084 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.884978 kernel: audit: type=1325 audit(1752108369.878:968): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.885033 kernel: audit: type=1300 audit(1752108369.878:968): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdfe40af0 a2=0 a3=1 items=0 ppid=2084 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.885053 kernel: audit: type=1327 audit(1752108369.878:968): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.888000 audit[2453]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.888000 audit[2453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdfe40af0 a2=0 a3=1 items=0 ppid=2084 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:09.888000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:09.891828 kernel: audit: type=1325 audit(1752108369.888:969): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:09.927142 systemd[1]: Created slice kubepods-besteffort-pode5f21e5f_0142_4a2d_9c1c_d38f321ef340.slice. Jul 10 00:46:10.029019 kubelet[1971]: I0710 00:46:10.028973 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/e5f21e5f-0142-4a2d-9c1c-d38f321ef340-typha-certs\") pod \"calico-typha-6ff47568d9-5kp74\" (UID: \"e5f21e5f-0142-4a2d-9c1c-d38f321ef340\") " pod="calico-system/calico-typha-6ff47568d9-5kp74" Jul 10 00:46:10.029019 kubelet[1971]: I0710 00:46:10.029023 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e5f21e5f-0142-4a2d-9c1c-d38f321ef340-tigera-ca-bundle\") pod \"calico-typha-6ff47568d9-5kp74\" (UID: \"e5f21e5f-0142-4a2d-9c1c-d38f321ef340\") " pod="calico-system/calico-typha-6ff47568d9-5kp74" Jul 10 00:46:10.029401 kubelet[1971]: I0710 00:46:10.029062 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b2vtq\" (UniqueName: \"kubernetes.io/projected/e5f21e5f-0142-4a2d-9c1c-d38f321ef340-kube-api-access-b2vtq\") pod \"calico-typha-6ff47568d9-5kp74\" (UID: \"e5f21e5f-0142-4a2d-9c1c-d38f321ef340\") " pod="calico-system/calico-typha-6ff47568d9-5kp74" Jul 10 00:46:10.168190 systemd[1]: Created slice kubepods-besteffort-podc6637633_5d88_4302_9df8_f0a4a1fb7ea6.slice. Jul 10 00:46:10.229264 kubelet[1971]: E0710 00:46:10.229206 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:10.229790 env[1218]: time="2025-07-10T00:46:10.229732407Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6ff47568d9-5kp74,Uid:e5f21e5f-0142-4a2d-9c1c-d38f321ef340,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:10.230378 kubelet[1971]: I0710 00:46:10.230346 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-var-lib-calico\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230434 kubelet[1971]: I0710 00:46:10.230397 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nvxsg\" (UniqueName: \"kubernetes.io/projected/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-kube-api-access-nvxsg\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230434 kubelet[1971]: I0710 00:46:10.230421 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-tigera-ca-bundle\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230481 kubelet[1971]: I0710 00:46:10.230440 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-node-certs\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230481 kubelet[1971]: I0710 00:46:10.230457 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-cni-bin-dir\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230535 kubelet[1971]: I0710 00:46:10.230486 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-cni-net-dir\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230535 kubelet[1971]: I0710 00:46:10.230505 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-flexvol-driver-host\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230535 kubelet[1971]: I0710 00:46:10.230520 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-policysync\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230596 kubelet[1971]: I0710 00:46:10.230535 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-var-run-calico\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230596 kubelet[1971]: I0710 00:46:10.230566 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-cni-log-dir\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230596 kubelet[1971]: I0710 00:46:10.230584 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-lib-modules\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.230665 kubelet[1971]: I0710 00:46:10.230598 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c6637633-5d88-4302-9df8-f0a4a1fb7ea6-xtables-lock\") pod \"calico-node-gpt5x\" (UID: \"c6637633-5d88-4302-9df8-f0a4a1fb7ea6\") " pod="calico-system/calico-node-gpt5x" Jul 10 00:46:10.259057 env[1218]: time="2025-07-10T00:46:10.257183297Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:10.259057 env[1218]: time="2025-07-10T00:46:10.259015781Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:10.259057 env[1218]: time="2025-07-10T00:46:10.259027781Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:10.259798 env[1218]: time="2025-07-10T00:46:10.259599982Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec2e4d302bfd420ad8718f1fdab848f5b5fda81f0c6a5c80d5b9b468a3f12a63 pid=2463 runtime=io.containerd.runc.v2 Jul 10 00:46:10.276401 systemd[1]: Started cri-containerd-ec2e4d302bfd420ad8718f1fdab848f5b5fda81f0c6a5c80d5b9b468a3f12a63.scope. Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit: BPF prog-id=125 op=LOAD Jul 10 00:46:10.312000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2463 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563326534643330326266643432306164383731386631666461623834 Jul 10 00:46:10.312000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.312000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2463 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563326534643330326266643432306164383731386631666461623834 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit: BPF prog-id=126 op=LOAD Jul 10 00:46:10.313000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2463 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563326534643330326266643432306164383731386631666461623834 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit: BPF prog-id=127 op=LOAD Jul 10 00:46:10.313000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2463 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563326534643330326266643432306164383731386631666461623834 Jul 10 00:46:10.313000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:46:10.313000 audit: BPF prog-id=126 op=UNLOAD Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.313000 audit: BPF prog-id=128 op=LOAD Jul 10 00:46:10.313000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2463 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563326534643330326266643432306164383731386631666461623834 Jul 10 00:46:10.333483 kubelet[1971]: E0710 00:46:10.333352 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.333483 kubelet[1971]: W0710 00:46:10.333374 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.336681 kubelet[1971]: E0710 00:46:10.336453 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.337175 kubelet[1971]: E0710 00:46:10.336967 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.337175 kubelet[1971]: W0710 00:46:10.337007 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.337835 kubelet[1971]: E0710 00:46:10.337036 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.338045 kubelet[1971]: E0710 00:46:10.337914 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.338045 kubelet[1971]: W0710 00:46:10.337929 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.338045 kubelet[1971]: E0710 00:46:10.337941 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.338480 kubelet[1971]: E0710 00:46:10.338366 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.338480 kubelet[1971]: W0710 00:46:10.338379 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.338480 kubelet[1971]: E0710 00:46:10.338390 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.339447 kubelet[1971]: E0710 00:46:10.338732 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.339447 kubelet[1971]: W0710 00:46:10.338743 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.339447 kubelet[1971]: E0710 00:46:10.338753 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.339696 kubelet[1971]: E0710 00:46:10.339682 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.339764 kubelet[1971]: W0710 00:46:10.339752 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.339899 kubelet[1971]: E0710 00:46:10.339886 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.342895 kubelet[1971]: E0710 00:46:10.342880 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.342988 kubelet[1971]: W0710 00:46:10.342973 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.343054 kubelet[1971]: E0710 00:46:10.343042 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.344252 env[1218]: time="2025-07-10T00:46:10.344213976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6ff47568d9-5kp74,Uid:e5f21e5f-0142-4a2d-9c1c-d38f321ef340,Namespace:calico-system,Attempt:0,} returns sandbox id \"ec2e4d302bfd420ad8718f1fdab848f5b5fda81f0c6a5c80d5b9b468a3f12a63\"" Jul 10 00:46:10.344398 kubelet[1971]: E0710 00:46:10.344386 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.344466 kubelet[1971]: W0710 00:46:10.344454 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.344523 kubelet[1971]: E0710 00:46:10.344512 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.344880 kubelet[1971]: E0710 00:46:10.344806 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:10.344990 kubelet[1971]: E0710 00:46:10.344978 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.345049 kubelet[1971]: W0710 00:46:10.345038 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.345109 kubelet[1971]: E0710 00:46:10.345098 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.345944 env[1218]: time="2025-07-10T00:46:10.345914219Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:46:10.346047 kubelet[1971]: E0710 00:46:10.346035 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.346102 kubelet[1971]: W0710 00:46:10.346092 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.346160 kubelet[1971]: E0710 00:46:10.346149 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.347923 kubelet[1971]: E0710 00:46:10.347899 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.347923 kubelet[1971]: W0710 00:46:10.347918 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.348019 kubelet[1971]: E0710 00:46:10.347934 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.348217 kubelet[1971]: E0710 00:46:10.348200 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.348217 kubelet[1971]: W0710 00:46:10.348214 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.348273 kubelet[1971]: E0710 00:46:10.348225 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.348446 kubelet[1971]: E0710 00:46:10.348428 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.348446 kubelet[1971]: W0710 00:46:10.348443 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.348547 kubelet[1971]: E0710 00:46:10.348452 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.349265 kubelet[1971]: E0710 00:46:10.349246 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.349309 kubelet[1971]: W0710 00:46:10.349271 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.349309 kubelet[1971]: E0710 00:46:10.349283 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.349524 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.351824 kubelet[1971]: W0710 00:46:10.349541 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.349552 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.349892 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.351824 kubelet[1971]: W0710 00:46:10.349902 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.349912 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.350085 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.351824 kubelet[1971]: W0710 00:46:10.350093 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.350101 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.351824 kubelet[1971]: E0710 00:46:10.350277 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352102 kubelet[1971]: W0710 00:46:10.350286 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352102 kubelet[1971]: E0710 00:46:10.350293 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352102 kubelet[1971]: E0710 00:46:10.350465 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352102 kubelet[1971]: W0710 00:46:10.350474 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352102 kubelet[1971]: E0710 00:46:10.350482 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352102 kubelet[1971]: E0710 00:46:10.350626 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352102 kubelet[1971]: W0710 00:46:10.350634 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352102 kubelet[1971]: E0710 00:46:10.350642 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352102 kubelet[1971]: E0710 00:46:10.350778 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352102 kubelet[1971]: W0710 00:46:10.350785 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.350792 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.350976 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352343 kubelet[1971]: W0710 00:46:10.350984 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.350992 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.351157 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352343 kubelet[1971]: W0710 00:46:10.351166 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.351173 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.351338 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352343 kubelet[1971]: W0710 00:46:10.351347 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352343 kubelet[1971]: E0710 00:46:10.351355 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352627 kubelet[1971]: E0710 00:46:10.351577 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352627 kubelet[1971]: W0710 00:46:10.351588 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352627 kubelet[1971]: E0710 00:46:10.351611 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.352627 kubelet[1971]: E0710 00:46:10.351806 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.352627 kubelet[1971]: W0710 00:46:10.351839 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.352627 kubelet[1971]: E0710 00:46:10.351849 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.405483 kubelet[1971]: E0710 00:46:10.405426 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlxl2" podUID="97c6e12f-0612-407a-922b-196d3c8b2bc5" Jul 10 00:46:10.471476 env[1218]: time="2025-07-10T00:46:10.471373407Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-gpt5x,Uid:c6637633-5d88-4302-9df8-f0a4a1fb7ea6,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:10.490709 env[1218]: time="2025-07-10T00:46:10.489907761Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:10.490709 env[1218]: time="2025-07-10T00:46:10.489994121Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:10.490709 env[1218]: time="2025-07-10T00:46:10.490035281Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:10.496918 env[1218]: time="2025-07-10T00:46:10.496793573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc pid=2531 runtime=io.containerd.runc.v2 Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503312 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.507837 kubelet[1971]: W0710 00:46:10.503347 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503371 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503554 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.507837 kubelet[1971]: W0710 00:46:10.503563 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503617 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503786 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.507837 kubelet[1971]: W0710 00:46:10.503795 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503804 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.507837 kubelet[1971]: E0710 00:46:10.503983 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508302 kubelet[1971]: W0710 00:46:10.503992 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508302 kubelet[1971]: E0710 00:46:10.504001 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508302 kubelet[1971]: E0710 00:46:10.504187 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508302 kubelet[1971]: W0710 00:46:10.504196 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508302 kubelet[1971]: E0710 00:46:10.504205 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508302 kubelet[1971]: E0710 00:46:10.504419 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508302 kubelet[1971]: W0710 00:46:10.504428 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508302 kubelet[1971]: E0710 00:46:10.504436 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508302 kubelet[1971]: E0710 00:46:10.504607 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508302 kubelet[1971]: W0710 00:46:10.504616 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.504624 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.504795 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508548 kubelet[1971]: W0710 00:46:10.504803 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.504841 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.505233 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508548 kubelet[1971]: W0710 00:46:10.505244 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.505255 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.505463 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508548 kubelet[1971]: W0710 00:46:10.505473 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508548 kubelet[1971]: E0710 00:46:10.505482 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.505632 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508763 kubelet[1971]: W0710 00:46:10.505639 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.505647 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.505825 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508763 kubelet[1971]: W0710 00:46:10.505835 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.505844 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.506004 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508763 kubelet[1971]: W0710 00:46:10.506011 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.506020 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508763 kubelet[1971]: E0710 00:46:10.506310 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508984 kubelet[1971]: W0710 00:46:10.506320 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508984 kubelet[1971]: E0710 00:46:10.506347 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508984 kubelet[1971]: E0710 00:46:10.506526 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508984 kubelet[1971]: W0710 00:46:10.506534 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508984 kubelet[1971]: E0710 00:46:10.506545 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.508984 kubelet[1971]: E0710 00:46:10.508941 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.508984 kubelet[1971]: W0710 00:46:10.508954 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.508984 kubelet[1971]: E0710 00:46:10.508965 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.509192 kubelet[1971]: E0710 00:46:10.509180 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.509192 kubelet[1971]: W0710 00:46:10.509189 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.509237 kubelet[1971]: E0710 00:46:10.509199 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.510499 kubelet[1971]: E0710 00:46:10.509347 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.510499 kubelet[1971]: W0710 00:46:10.509361 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.510499 kubelet[1971]: E0710 00:46:10.509371 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.510499 kubelet[1971]: E0710 00:46:10.509497 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.510499 kubelet[1971]: W0710 00:46:10.509504 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.510499 kubelet[1971]: E0710 00:46:10.509512 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.510499 kubelet[1971]: E0710 00:46:10.509862 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.510499 kubelet[1971]: W0710 00:46:10.509870 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.510499 kubelet[1971]: E0710 00:46:10.509904 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.510090 systemd[1]: Started cri-containerd-7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc.scope. Jul 10 00:46:10.535971 kubelet[1971]: E0710 00:46:10.535929 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.535971 kubelet[1971]: W0710 00:46:10.535957 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.536144 kubelet[1971]: E0710 00:46:10.535982 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.536144 kubelet[1971]: I0710 00:46:10.536008 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/97c6e12f-0612-407a-922b-196d3c8b2bc5-registration-dir\") pod \"csi-node-driver-qlxl2\" (UID: \"97c6e12f-0612-407a-922b-196d3c8b2bc5\") " pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:10.538831 kubelet[1971]: E0710 00:46:10.536282 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.538831 kubelet[1971]: W0710 00:46:10.536299 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.538831 kubelet[1971]: E0710 00:46:10.536310 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.538831 kubelet[1971]: I0710 00:46:10.536339 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/97c6e12f-0612-407a-922b-196d3c8b2bc5-kubelet-dir\") pod \"csi-node-driver-qlxl2\" (UID: \"97c6e12f-0612-407a-922b-196d3c8b2bc5\") " pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:10.538831 kubelet[1971]: E0710 00:46:10.536557 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.538831 kubelet[1971]: W0710 00:46:10.536568 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.538831 kubelet[1971]: E0710 00:46:10.536579 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.538831 kubelet[1971]: I0710 00:46:10.536597 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/97c6e12f-0612-407a-922b-196d3c8b2bc5-socket-dir\") pod \"csi-node-driver-qlxl2\" (UID: \"97c6e12f-0612-407a-922b-196d3c8b2bc5\") " pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:10.538831 kubelet[1971]: E0710 00:46:10.537035 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.539132 kubelet[1971]: W0710 00:46:10.537051 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.539132 kubelet[1971]: E0710 00:46:10.537062 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.539132 kubelet[1971]: I0710 00:46:10.537081 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/97c6e12f-0612-407a-922b-196d3c8b2bc5-varrun\") pod \"csi-node-driver-qlxl2\" (UID: \"97c6e12f-0612-407a-922b-196d3c8b2bc5\") " pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:10.539132 kubelet[1971]: E0710 00:46:10.537283 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.539132 kubelet[1971]: W0710 00:46:10.537293 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.539132 kubelet[1971]: E0710 00:46:10.537303 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.539132 kubelet[1971]: I0710 00:46:10.537321 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b6f5g\" (UniqueName: \"kubernetes.io/projected/97c6e12f-0612-407a-922b-196d3c8b2bc5-kube-api-access-b6f5g\") pod \"csi-node-driver-qlxl2\" (UID: \"97c6e12f-0612-407a-922b-196d3c8b2bc5\") " pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:10.540921 kubelet[1971]: E0710 00:46:10.540885 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.540921 kubelet[1971]: W0710 00:46:10.540912 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.540921 kubelet[1971]: E0710 00:46:10.540927 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.542614 kubelet[1971]: E0710 00:46:10.542571 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.542614 kubelet[1971]: W0710 00:46:10.542595 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.542614 kubelet[1971]: E0710 00:46:10.542613 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.542888 kubelet[1971]: E0710 00:46:10.542867 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.542888 kubelet[1971]: W0710 00:46:10.542884 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.542966 kubelet[1971]: E0710 00:46:10.542896 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.543986 kubelet[1971]: E0710 00:46:10.543957 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.543986 kubelet[1971]: W0710 00:46:10.543979 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.544088 kubelet[1971]: E0710 00:46:10.543992 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.545419 kubelet[1971]: E0710 00:46:10.545385 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.545419 kubelet[1971]: W0710 00:46:10.545406 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.545530 kubelet[1971]: E0710 00:46:10.545437 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.547642 kubelet[1971]: E0710 00:46:10.547605 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.547642 kubelet[1971]: W0710 00:46:10.547630 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.547642 kubelet[1971]: E0710 00:46:10.547645 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.550920 kubelet[1971]: E0710 00:46:10.550885 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.550920 kubelet[1971]: W0710 00:46:10.550910 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.550920 kubelet[1971]: E0710 00:46:10.550923 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.551215 kubelet[1971]: E0710 00:46:10.551171 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.551215 kubelet[1971]: W0710 00:46:10.551189 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.551215 kubelet[1971]: E0710 00:46:10.551210 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.551416 kubelet[1971]: E0710 00:46:10.551397 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.551416 kubelet[1971]: W0710 00:46:10.551411 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.551485 kubelet[1971]: E0710 00:46:10.551422 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.551607 kubelet[1971]: E0710 00:46:10.551592 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.551607 kubelet[1971]: W0710 00:46:10.551607 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.551679 kubelet[1971]: E0710 00:46:10.551617 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit: BPF prog-id=129 op=LOAD Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2531 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733333463303933636461636535333235303237353131373630393139 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2531 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733333463303933636461636535333235303237353131373630393139 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit: BPF prog-id=130 op=LOAD Jul 10 00:46:10.593000 audit[2539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2531 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733333463303933636461636535333235303237353131373630393139 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit: BPF prog-id=131 op=LOAD Jul 10 00:46:10.593000 audit[2539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2531 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733333463303933636461636535333235303237353131373630393139 Jul 10 00:46:10.593000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:46:10.593000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:10.593000 audit: BPF prog-id=132 op=LOAD Jul 10 00:46:10.593000 audit[2539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2531 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733333463303933636461636535333235303237353131373630393139 Jul 10 00:46:10.604622 env[1218]: time="2025-07-10T00:46:10.604573209Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-gpt5x,Uid:c6637633-5d88-4302-9df8-f0a4a1fb7ea6,Namespace:calico-system,Attempt:0,} returns sandbox id \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\"" Jul 10 00:46:10.638483 kubelet[1971]: E0710 00:46:10.638458 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.638483 kubelet[1971]: W0710 00:46:10.638481 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.638627 kubelet[1971]: E0710 00:46:10.638500 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.638748 kubelet[1971]: E0710 00:46:10.638736 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.638748 kubelet[1971]: W0710 00:46:10.638748 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.638800 kubelet[1971]: E0710 00:46:10.638757 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.638975 kubelet[1971]: E0710 00:46:10.638962 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.639027 kubelet[1971]: W0710 00:46:10.638976 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.639027 kubelet[1971]: E0710 00:46:10.638985 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.639172 kubelet[1971]: E0710 00:46:10.639160 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.639172 kubelet[1971]: W0710 00:46:10.639172 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.639236 kubelet[1971]: E0710 00:46:10.639180 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.639386 kubelet[1971]: E0710 00:46:10.639373 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.639386 kubelet[1971]: W0710 00:46:10.639385 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.639465 kubelet[1971]: E0710 00:46:10.639394 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.639614 kubelet[1971]: E0710 00:46:10.639602 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.639614 kubelet[1971]: W0710 00:46:10.639614 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.639674 kubelet[1971]: E0710 00:46:10.639623 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.639801 kubelet[1971]: E0710 00:46:10.639788 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.639801 kubelet[1971]: W0710 00:46:10.639800 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.639869 kubelet[1971]: E0710 00:46:10.639821 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.640010 kubelet[1971]: E0710 00:46:10.639998 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.640010 kubelet[1971]: W0710 00:46:10.640010 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.640065 kubelet[1971]: E0710 00:46:10.640018 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.640200 kubelet[1971]: E0710 00:46:10.640187 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.640200 kubelet[1971]: W0710 00:46:10.640199 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.640259 kubelet[1971]: E0710 00:46:10.640207 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.640398 kubelet[1971]: E0710 00:46:10.640386 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.640398 kubelet[1971]: W0710 00:46:10.640397 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.640459 kubelet[1971]: E0710 00:46:10.640406 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.640615 kubelet[1971]: E0710 00:46:10.640580 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.640615 kubelet[1971]: W0710 00:46:10.640593 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.640615 kubelet[1971]: E0710 00:46:10.640602 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.640777 kubelet[1971]: E0710 00:46:10.640764 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.640777 kubelet[1971]: W0710 00:46:10.640775 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.640838 kubelet[1971]: E0710 00:46:10.640783 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.640982 kubelet[1971]: E0710 00:46:10.640968 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.640982 kubelet[1971]: W0710 00:46:10.640981 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.641059 kubelet[1971]: E0710 00:46:10.640990 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.641143 kubelet[1971]: E0710 00:46:10.641131 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.641143 kubelet[1971]: W0710 00:46:10.641142 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.641198 kubelet[1971]: E0710 00:46:10.641151 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.641342 kubelet[1971]: E0710 00:46:10.641324 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.641342 kubelet[1971]: W0710 00:46:10.641341 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.641408 kubelet[1971]: E0710 00:46:10.641349 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.641519 kubelet[1971]: E0710 00:46:10.641507 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.641519 kubelet[1971]: W0710 00:46:10.641518 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.641574 kubelet[1971]: E0710 00:46:10.641526 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.641660 kubelet[1971]: E0710 00:46:10.641649 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.641692 kubelet[1971]: W0710 00:46:10.641659 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.641692 kubelet[1971]: E0710 00:46:10.641669 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.641931 kubelet[1971]: E0710 00:46:10.641916 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.641931 kubelet[1971]: W0710 00:46:10.641930 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.641986 kubelet[1971]: E0710 00:46:10.641941 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.642082 kubelet[1971]: E0710 00:46:10.642070 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.642082 kubelet[1971]: W0710 00:46:10.642081 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.642141 kubelet[1971]: E0710 00:46:10.642089 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.642228 kubelet[1971]: E0710 00:46:10.642216 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.642228 kubelet[1971]: W0710 00:46:10.642227 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.642276 kubelet[1971]: E0710 00:46:10.642235 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.642412 kubelet[1971]: E0710 00:46:10.642399 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.642412 kubelet[1971]: W0710 00:46:10.642411 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.642481 kubelet[1971]: E0710 00:46:10.642419 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.642559 kubelet[1971]: E0710 00:46:10.642546 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.642559 kubelet[1971]: W0710 00:46:10.642558 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.642618 kubelet[1971]: E0710 00:46:10.642565 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.642726 kubelet[1971]: E0710 00:46:10.642714 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.642726 kubelet[1971]: W0710 00:46:10.642725 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.642780 kubelet[1971]: E0710 00:46:10.642733 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.642892 kubelet[1971]: E0710 00:46:10.642880 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.642925 kubelet[1971]: W0710 00:46:10.642892 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.642925 kubelet[1971]: E0710 00:46:10.642900 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.643068 kubelet[1971]: E0710 00:46:10.643056 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.643068 kubelet[1971]: W0710 00:46:10.643067 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.643138 kubelet[1971]: E0710 00:46:10.643075 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.653102 kubelet[1971]: E0710 00:46:10.653080 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:10.653102 kubelet[1971]: W0710 00:46:10.653098 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:10.653216 kubelet[1971]: E0710 00:46:10.653110 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:10.904000 audit[2627]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:10.904000 audit[2627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff5481650 a2=0 a3=1 items=0 ppid=2084 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.904000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:10.914000 audit[2627]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:10.914000 audit[2627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff5481650 a2=0 a3=1 items=0 ppid=2084 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:10.914000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:11.374514 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3262207500.mount: Deactivated successfully. Jul 10 00:46:11.928000 audit[2629]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2629 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:11.928000 audit[2629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffed88e5e0 a2=0 a3=1 items=0 ppid=2084 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:11.928000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:11.932000 audit[2629]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2629 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:11.932000 audit[2629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffed88e5e0 a2=0 a3=1 items=0 ppid=2084 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:11.932000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:11.969459 env[1218]: time="2025-07-10T00:46:11.969412741Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:11.970670 env[1218]: time="2025-07-10T00:46:11.970636703Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:11.972017 env[1218]: time="2025-07-10T00:46:11.971990226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:11.973953 env[1218]: time="2025-07-10T00:46:11.973913709Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:11.974659 env[1218]: time="2025-07-10T00:46:11.974628270Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 10 00:46:11.984823 env[1218]: time="2025-07-10T00:46:11.984769688Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:46:11.998346 env[1218]: time="2025-07-10T00:46:11.998298711Z" level=info msg="CreateContainer within sandbox \"ec2e4d302bfd420ad8718f1fdab848f5b5fda81f0c6a5c80d5b9b468a3f12a63\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:46:12.013202 env[1218]: time="2025-07-10T00:46:12.013162135Z" level=info msg="CreateContainer within sandbox \"ec2e4d302bfd420ad8718f1fdab848f5b5fda81f0c6a5c80d5b9b468a3f12a63\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"f898614a712cae22edda57116b2759da844a666c1f924832912d0e64e504ae12\"" Jul 10 00:46:12.015948 env[1218]: time="2025-07-10T00:46:12.015885019Z" level=info msg="StartContainer for \"f898614a712cae22edda57116b2759da844a666c1f924832912d0e64e504ae12\"" Jul 10 00:46:12.039064 systemd[1]: Started cri-containerd-f898614a712cae22edda57116b2759da844a666c1f924832912d0e64e504ae12.scope. Jul 10 00:46:12.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit: BPF prog-id=133 op=LOAD Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2463 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638393836313461373132636165323265646461353731313662323735 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2463 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638393836313461373132636165323265646461353731313662323735 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit: BPF prog-id=134 op=LOAD Jul 10 00:46:12.064000 audit[2639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2463 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638393836313461373132636165323265646461353731313662323735 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit: BPF prog-id=135 op=LOAD Jul 10 00:46:12.064000 audit[2639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2463 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638393836313461373132636165323265646461353731313662323735 Jul 10 00:46:12.064000 audit: BPF prog-id=135 op=UNLOAD Jul 10 00:46:12.064000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { perfmon } for pid=2639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit[2639]: AVC avc: denied { bpf } for pid=2639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.064000 audit: BPF prog-id=136 op=LOAD Jul 10 00:46:12.064000 audit[2639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2463 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638393836313461373132636165323265646461353731313662323735 Jul 10 00:46:12.144988 env[1218]: time="2025-07-10T00:46:12.144927705Z" level=info msg="StartContainer for \"f898614a712cae22edda57116b2759da844a666c1f924832912d0e64e504ae12\" returns successfully" Jul 10 00:46:12.197364 kubelet[1971]: E0710 00:46:12.197240 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlxl2" podUID="97c6e12f-0612-407a-922b-196d3c8b2bc5" Jul 10 00:46:12.244946 kubelet[1971]: E0710 00:46:12.244915 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:12.258998 kubelet[1971]: I0710 00:46:12.258936 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6ff47568d9-5kp74" podStartSLOduration=1.621993062 podStartE2EDuration="3.256517964s" podCreationTimestamp="2025-07-10 00:46:09 +0000 UTC" firstStartedPulling="2025-07-10 00:46:10.345646178 +0000 UTC m=+20.253896709" lastFinishedPulling="2025-07-10 00:46:11.98017108 +0000 UTC m=+21.888421611" observedRunningTime="2025-07-10 00:46:12.256472084 +0000 UTC m=+22.164722615" watchObservedRunningTime="2025-07-10 00:46:12.256517964 +0000 UTC m=+22.164768495" Jul 10 00:46:12.326512 kubelet[1971]: E0710 00:46:12.326479 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.326512 kubelet[1971]: W0710 00:46:12.326503 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.326680 kubelet[1971]: E0710 00:46:12.326531 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.326706 kubelet[1971]: E0710 00:46:12.326700 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.326732 kubelet[1971]: W0710 00:46:12.326708 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.326732 kubelet[1971]: E0710 00:46:12.326718 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.328490 kubelet[1971]: E0710 00:46:12.328469 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.328490 kubelet[1971]: W0710 00:46:12.328484 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.328612 kubelet[1971]: E0710 00:46:12.328497 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.328707 kubelet[1971]: E0710 00:46:12.328690 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.328707 kubelet[1971]: W0710 00:46:12.328704 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.328784 kubelet[1971]: E0710 00:46:12.328714 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.329368 kubelet[1971]: E0710 00:46:12.329347 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.329368 kubelet[1971]: W0710 00:46:12.329363 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.329486 kubelet[1971]: E0710 00:46:12.329375 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.330251 kubelet[1971]: E0710 00:46:12.330234 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.330251 kubelet[1971]: W0710 00:46:12.330249 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.330388 kubelet[1971]: E0710 00:46:12.330264 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.330938 kubelet[1971]: E0710 00:46:12.330915 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.330938 kubelet[1971]: W0710 00:46:12.330931 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.330938 kubelet[1971]: E0710 00:46:12.330943 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.331192 kubelet[1971]: E0710 00:46:12.331176 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.331192 kubelet[1971]: W0710 00:46:12.331190 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.331272 kubelet[1971]: E0710 00:46:12.331201 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.331445 kubelet[1971]: E0710 00:46:12.331423 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.331445 kubelet[1971]: W0710 00:46:12.331439 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.331522 kubelet[1971]: E0710 00:46:12.331450 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.331673 kubelet[1971]: E0710 00:46:12.331642 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.331673 kubelet[1971]: W0710 00:46:12.331655 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.331673 kubelet[1971]: E0710 00:46:12.331666 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.332922 kubelet[1971]: E0710 00:46:12.332900 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.332922 kubelet[1971]: W0710 00:46:12.332916 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.332922 kubelet[1971]: E0710 00:46:12.332928 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.333129 kubelet[1971]: E0710 00:46:12.333105 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.333129 kubelet[1971]: W0710 00:46:12.333118 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.333129 kubelet[1971]: E0710 00:46:12.333128 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.334406 kubelet[1971]: E0710 00:46:12.334389 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.334406 kubelet[1971]: W0710 00:46:12.334404 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.334515 kubelet[1971]: E0710 00:46:12.334416 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.334618 kubelet[1971]: E0710 00:46:12.334603 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.334618 kubelet[1971]: W0710 00:46:12.334614 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.334731 kubelet[1971]: E0710 00:46:12.334622 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.334789 kubelet[1971]: E0710 00:46:12.334770 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.334789 kubelet[1971]: W0710 00:46:12.334782 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.334789 kubelet[1971]: E0710 00:46:12.334790 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.352261 kubelet[1971]: E0710 00:46:12.352224 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.352261 kubelet[1971]: W0710 00:46:12.352244 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.352261 kubelet[1971]: E0710 00:46:12.352261 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.352522 kubelet[1971]: E0710 00:46:12.352500 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.352522 kubelet[1971]: W0710 00:46:12.352513 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.352522 kubelet[1971]: E0710 00:46:12.352523 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.352736 kubelet[1971]: E0710 00:46:12.352720 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.352736 kubelet[1971]: W0710 00:46:12.352733 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.352824 kubelet[1971]: E0710 00:46:12.352744 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.352997 kubelet[1971]: E0710 00:46:12.352977 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.352997 kubelet[1971]: W0710 00:46:12.352990 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.353087 kubelet[1971]: E0710 00:46:12.353003 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.353206 kubelet[1971]: E0710 00:46:12.353179 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.353206 kubelet[1971]: W0710 00:46:12.353190 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.353206 kubelet[1971]: E0710 00:46:12.353199 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.353399 kubelet[1971]: E0710 00:46:12.353376 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.353399 kubelet[1971]: W0710 00:46:12.353388 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.353399 kubelet[1971]: E0710 00:46:12.353398 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.357005 kubelet[1971]: E0710 00:46:12.356973 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.357005 kubelet[1971]: W0710 00:46:12.356991 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.357005 kubelet[1971]: E0710 00:46:12.357004 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.359941 kubelet[1971]: E0710 00:46:12.359917 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.359941 kubelet[1971]: W0710 00:46:12.359933 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.359941 kubelet[1971]: E0710 00:46:12.359946 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.360212 kubelet[1971]: E0710 00:46:12.360192 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.360212 kubelet[1971]: W0710 00:46:12.360207 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.360306 kubelet[1971]: E0710 00:46:12.360218 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.363467 kubelet[1971]: E0710 00:46:12.363412 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.363467 kubelet[1971]: W0710 00:46:12.363459 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.363586 kubelet[1971]: E0710 00:46:12.363476 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.366922 kubelet[1971]: E0710 00:46:12.366896 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.366922 kubelet[1971]: W0710 00:46:12.366916 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.367036 kubelet[1971]: E0710 00:46:12.366931 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.369926 kubelet[1971]: E0710 00:46:12.369901 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.369926 kubelet[1971]: W0710 00:46:12.369921 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.370032 kubelet[1971]: E0710 00:46:12.369940 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.370146 kubelet[1971]: E0710 00:46:12.370118 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.370146 kubelet[1971]: W0710 00:46:12.370132 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.370146 kubelet[1971]: E0710 00:46:12.370140 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.371253 kubelet[1971]: E0710 00:46:12.371214 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.371253 kubelet[1971]: W0710 00:46:12.371235 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.371253 kubelet[1971]: E0710 00:46:12.371247 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.374962 kubelet[1971]: E0710 00:46:12.374937 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.374962 kubelet[1971]: W0710 00:46:12.374955 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.375074 kubelet[1971]: E0710 00:46:12.374969 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.378921 kubelet[1971]: E0710 00:46:12.378896 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.378921 kubelet[1971]: W0710 00:46:12.378914 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.379034 kubelet[1971]: E0710 00:46:12.378928 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.379726 kubelet[1971]: E0710 00:46:12.379695 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.379726 kubelet[1971]: W0710 00:46:12.379716 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.379726 kubelet[1971]: E0710 00:46:12.379730 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.382941 kubelet[1971]: E0710 00:46:12.382910 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:46:12.382941 kubelet[1971]: W0710 00:46:12.382928 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:46:12.382941 kubelet[1971]: E0710 00:46:12.382941 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:46:12.861527 env[1218]: time="2025-07-10T00:46:12.861455491Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:12.863056 env[1218]: time="2025-07-10T00:46:12.863018213Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:12.864787 env[1218]: time="2025-07-10T00:46:12.864751176Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:12.867120 env[1218]: time="2025-07-10T00:46:12.867080980Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 10 00:46:12.867369 env[1218]: time="2025-07-10T00:46:12.867337380Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:12.899529 env[1218]: time="2025-07-10T00:46:12.899476831Z" level=info msg="CreateContainer within sandbox \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:46:12.912944 env[1218]: time="2025-07-10T00:46:12.912902533Z" level=info msg="CreateContainer within sandbox \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd\"" Jul 10 00:46:12.914859 env[1218]: time="2025-07-10T00:46:12.913609374Z" level=info msg="StartContainer for \"491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd\"" Jul 10 00:46:12.933905 systemd[1]: Started cri-containerd-491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd.scope. Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2531 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316238353738343435333735626466346364666133383933333231 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.974000 audit: BPF prog-id=137 op=LOAD Jul 10 00:46:12.974000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2531 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316238353738343435333735626466346364666133383933333231 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit: BPF prog-id=138 op=LOAD Jul 10 00:46:12.976000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2531 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316238353738343435333735626466346364666133383933333231 Jul 10 00:46:12.976000 audit: BPF prog-id=138 op=UNLOAD Jul 10 00:46:12.976000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:12.976000 audit: BPF prog-id=139 op=LOAD Jul 10 00:46:12.976000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2531 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316238353738343435333735626466346364666133383933333231 Jul 10 00:46:12.993237 env[1218]: time="2025-07-10T00:46:12.993185821Z" level=info msg="StartContainer for \"491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd\" returns successfully" Jul 10 00:46:13.008908 systemd[1]: cri-containerd-491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd.scope: Deactivated successfully. Jul 10 00:46:13.012000 audit: BPF prog-id=139 op=UNLOAD Jul 10 00:46:13.049222 env[1218]: time="2025-07-10T00:46:13.049173066Z" level=info msg="shim disconnected" id=491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd Jul 10 00:46:13.049486 env[1218]: time="2025-07-10T00:46:13.049465426Z" level=warning msg="cleaning up after shim disconnected" id=491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd namespace=k8s.io Jul 10 00:46:13.049548 env[1218]: time="2025-07-10T00:46:13.049536106Z" level=info msg="cleaning up dead shim" Jul 10 00:46:13.059204 env[1218]: time="2025-07-10T00:46:13.059163041Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:46:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2751 runtime=io.containerd.runc.v2\n" Jul 10 00:46:13.134422 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-491b8578445375bdf4cdfa389332189790a1334e06aeefc523a7c70e7e177fcd-rootfs.mount: Deactivated successfully. Jul 10 00:46:13.247887 kubelet[1971]: I0710 00:46:13.247856 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:13.248235 kubelet[1971]: E0710 00:46:13.248174 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:13.249192 env[1218]: time="2025-07-10T00:46:13.249160086Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:46:14.195544 kubelet[1971]: E0710 00:46:14.195484 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlxl2" podUID="97c6e12f-0612-407a-922b-196d3c8b2bc5" Jul 10 00:46:15.610503 env[1218]: time="2025-07-10T00:46:15.610434460Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:15.612083 env[1218]: time="2025-07-10T00:46:15.612044062Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:15.613576 env[1218]: time="2025-07-10T00:46:15.613537144Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:15.615029 env[1218]: time="2025-07-10T00:46:15.614993946Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:15.615663 env[1218]: time="2025-07-10T00:46:15.615597747Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 10 00:46:15.663323 env[1218]: time="2025-07-10T00:46:15.663251489Z" level=info msg="CreateContainer within sandbox \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:46:15.679696 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount46190147.mount: Deactivated successfully. Jul 10 00:46:15.682946 env[1218]: time="2025-07-10T00:46:15.682894075Z" level=info msg="CreateContainer within sandbox \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438\"" Jul 10 00:46:15.683724 env[1218]: time="2025-07-10T00:46:15.683694916Z" level=info msg="StartContainer for \"5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438\"" Jul 10 00:46:15.704293 systemd[1]: run-containerd-runc-k8s.io-5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438-runc.GS7Pyy.mount: Deactivated successfully. Jul 10 00:46:15.708439 systemd[1]: Started cri-containerd-5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438.scope. Jul 10 00:46:15.763449 kernel: kauditd_printk_skb: 229 callbacks suppressed Jul 10 00:46:15.763584 kernel: audit: type=1400 audit(1752108375.759:1035): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.759000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.766908 kernel: audit: type=1300 audit(1752108375.759:1035): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2531 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:15.759000 audit[2781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2531 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:15.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533313864376438376263616434396433363666353536653834336536 Jul 10 00:46:15.771422 kernel: audit: type=1327 audit(1752108375.759:1035): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533313864376438376263616434396433363666353536653834336536 Jul 10 00:46:15.771493 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.777371 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.781081 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.785315 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.785454 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.790287 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.790375 kernel: audit: type=1400 audit(1752108375.763:1036): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.763000 audit: BPF prog-id=140 op=LOAD Jul 10 00:46:15.763000 audit[2781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2531 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:15.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533313864376438376263616434396433363666353536653834336536 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.767000 audit: BPF prog-id=141 op=LOAD Jul 10 00:46:15.767000 audit[2781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2531 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:15.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533313864376438376263616434396433363666353536653834336536 Jul 10 00:46:15.770000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:46:15.770000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:15.770000 audit: BPF prog-id=142 op=LOAD Jul 10 00:46:15.770000 audit[2781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2531 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:15.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533313864376438376263616434396433363666353536653834336536 Jul 10 00:46:15.798660 env[1218]: time="2025-07-10T00:46:15.798614748Z" level=info msg="StartContainer for \"5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438\" returns successfully" Jul 10 00:46:16.195761 kubelet[1971]: E0710 00:46:16.195383 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlxl2" podUID="97c6e12f-0612-407a-922b-196d3c8b2bc5" Jul 10 00:46:16.453722 env[1218]: time="2025-07-10T00:46:16.453624773Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:46:16.455898 systemd[1]: cri-containerd-5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438.scope: Deactivated successfully. Jul 10 00:46:16.461000 audit: BPF prog-id=142 op=UNLOAD Jul 10 00:46:16.508225 env[1218]: time="2025-07-10T00:46:16.508159120Z" level=info msg="shim disconnected" id=5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438 Jul 10 00:46:16.508225 env[1218]: time="2025-07-10T00:46:16.508212041Z" level=warning msg="cleaning up after shim disconnected" id=5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438 namespace=k8s.io Jul 10 00:46:16.508225 env[1218]: time="2025-07-10T00:46:16.508222081Z" level=info msg="cleaning up dead shim" Jul 10 00:46:16.515151 env[1218]: time="2025-07-10T00:46:16.515098889Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:46:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2822 runtime=io.containerd.runc.v2\n" Jul 10 00:46:16.551955 kubelet[1971]: I0710 00:46:16.551923 1971 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 10 00:46:16.586833 systemd[1]: Created slice kubepods-besteffort-pod213935fc_36c6_4ee5_b2cd_1c20e5fa7b38.slice. Jul 10 00:46:16.593993 systemd[1]: Created slice kubepods-burstable-pod05bc4ecd_5ddb_447d_aa28_779912945b17.slice. Jul 10 00:46:16.597817 kubelet[1971]: I0710 00:46:16.597777 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/05bc4ecd-5ddb-447d-aa28-779912945b17-config-volume\") pod \"coredns-674b8bbfcf-94kwk\" (UID: \"05bc4ecd-5ddb-447d-aa28-779912945b17\") " pod="kube-system/coredns-674b8bbfcf-94kwk" Jul 10 00:46:16.597945 kubelet[1971]: I0710 00:46:16.597836 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hwsdd\" (UniqueName: \"kubernetes.io/projected/05bc4ecd-5ddb-447d-aa28-779912945b17-kube-api-access-hwsdd\") pod \"coredns-674b8bbfcf-94kwk\" (UID: \"05bc4ecd-5ddb-447d-aa28-779912945b17\") " pod="kube-system/coredns-674b8bbfcf-94kwk" Jul 10 00:46:16.597945 kubelet[1971]: I0710 00:46:16.597858 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/213935fc-36c6-4ee5-b2cd-1c20e5fa7b38-tigera-ca-bundle\") pod \"calico-kube-controllers-6f67db6b86-l28z9\" (UID: \"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38\") " pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" Jul 10 00:46:16.597945 kubelet[1971]: I0710 00:46:16.597877 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xvkqx\" (UniqueName: \"kubernetes.io/projected/213935fc-36c6-4ee5-b2cd-1c20e5fa7b38-kube-api-access-xvkqx\") pod \"calico-kube-controllers-6f67db6b86-l28z9\" (UID: \"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38\") " pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" Jul 10 00:46:16.608043 systemd[1]: Created slice kubepods-burstable-pod0f1b3610_3e8c_4388_b51e_1c24bd09f352.slice. Jul 10 00:46:16.612963 systemd[1]: Created slice kubepods-besteffort-podf3a3de79_f413_407b_88e4_bc07b12da4ed.slice. Jul 10 00:46:16.617987 systemd[1]: Created slice kubepods-besteffort-pod5e7425a3_9bb7_4635_92e8_137e4368d192.slice. Jul 10 00:46:16.623881 systemd[1]: Created slice kubepods-besteffort-podc7eb19b2_5773_4960_8da1_d276ae70387a.slice. Jul 10 00:46:16.627458 systemd[1]: Created slice kubepods-besteffort-pod30f21bda_1ba3_4bcb_b2d9_c0d594954ccd.slice. Jul 10 00:46:16.677357 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5318d7d87bcad49d366f556e843e6a0a9f18076af6599da7be87e2b8dd17c438-rootfs.mount: Deactivated successfully. Jul 10 00:46:16.698774 kubelet[1971]: I0710 00:46:16.698733 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/0f1b3610-3e8c-4388-b51e-1c24bd09f352-config-volume\") pod \"coredns-674b8bbfcf-bfqjd\" (UID: \"0f1b3610-3e8c-4388-b51e-1c24bd09f352\") " pod="kube-system/coredns-674b8bbfcf-bfqjd" Jul 10 00:46:16.698774 kubelet[1971]: I0710 00:46:16.698780 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5e7425a3-9bb7-4635-92e8-137e4368d192-calico-apiserver-certs\") pod \"calico-apiserver-56698484bf-kt6p7\" (UID: \"5e7425a3-9bb7-4635-92e8-137e4368d192\") " pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" Jul 10 00:46:16.698946 kubelet[1971]: I0710 00:46:16.698799 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-backend-key-pair\") pod \"whisker-786d95bbc-n2wj7\" (UID: \"c7eb19b2-5773-4960-8da1-d276ae70387a\") " pod="calico-system/whisker-786d95bbc-n2wj7" Jul 10 00:46:16.698946 kubelet[1971]: I0710 00:46:16.698838 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/30f21bda-1ba3-4bcb-b2d9-c0d594954ccd-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-vn467\" (UID: \"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd\") " pod="calico-system/goldmane-768f4c5c69-vn467" Jul 10 00:46:16.698946 kubelet[1971]: I0710 00:46:16.698856 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ntplx\" (UniqueName: \"kubernetes.io/projected/f3a3de79-f413-407b-88e4-bc07b12da4ed-kube-api-access-ntplx\") pod \"calico-apiserver-56698484bf-l77g6\" (UID: \"f3a3de79-f413-407b-88e4-bc07b12da4ed\") " pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" Jul 10 00:46:16.698946 kubelet[1971]: I0710 00:46:16.698870 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/30f21bda-1ba3-4bcb-b2d9-c0d594954ccd-config\") pod \"goldmane-768f4c5c69-vn467\" (UID: \"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd\") " pod="calico-system/goldmane-768f4c5c69-vn467" Jul 10 00:46:16.698946 kubelet[1971]: I0710 00:46:16.698888 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mj8xz\" (UniqueName: \"kubernetes.io/projected/c7eb19b2-5773-4960-8da1-d276ae70387a-kube-api-access-mj8xz\") pod \"whisker-786d95bbc-n2wj7\" (UID: \"c7eb19b2-5773-4960-8da1-d276ae70387a\") " pod="calico-system/whisker-786d95bbc-n2wj7" Jul 10 00:46:16.699073 kubelet[1971]: I0710 00:46:16.698917 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f3a3de79-f413-407b-88e4-bc07b12da4ed-calico-apiserver-certs\") pod \"calico-apiserver-56698484bf-l77g6\" (UID: \"f3a3de79-f413-407b-88e4-bc07b12da4ed\") " pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" Jul 10 00:46:16.699073 kubelet[1971]: I0710 00:46:16.698932 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-ca-bundle\") pod \"whisker-786d95bbc-n2wj7\" (UID: \"c7eb19b2-5773-4960-8da1-d276ae70387a\") " pod="calico-system/whisker-786d95bbc-n2wj7" Jul 10 00:46:16.699073 kubelet[1971]: I0710 00:46:16.698991 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/30f21bda-1ba3-4bcb-b2d9-c0d594954ccd-goldmane-key-pair\") pod \"goldmane-768f4c5c69-vn467\" (UID: \"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd\") " pod="calico-system/goldmane-768f4c5c69-vn467" Jul 10 00:46:16.699073 kubelet[1971]: I0710 00:46:16.699010 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zkzvp\" (UniqueName: \"kubernetes.io/projected/30f21bda-1ba3-4bcb-b2d9-c0d594954ccd-kube-api-access-zkzvp\") pod \"goldmane-768f4c5c69-vn467\" (UID: \"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd\") " pod="calico-system/goldmane-768f4c5c69-vn467" Jul 10 00:46:16.699073 kubelet[1971]: I0710 00:46:16.699026 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4jk92\" (UniqueName: \"kubernetes.io/projected/0f1b3610-3e8c-4388-b51e-1c24bd09f352-kube-api-access-4jk92\") pod \"coredns-674b8bbfcf-bfqjd\" (UID: \"0f1b3610-3e8c-4388-b51e-1c24bd09f352\") " pod="kube-system/coredns-674b8bbfcf-bfqjd" Jul 10 00:46:16.699181 kubelet[1971]: I0710 00:46:16.699040 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gnl47\" (UniqueName: \"kubernetes.io/projected/5e7425a3-9bb7-4635-92e8-137e4368d192-kube-api-access-gnl47\") pod \"calico-apiserver-56698484bf-kt6p7\" (UID: \"5e7425a3-9bb7-4635-92e8-137e4368d192\") " pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" Jul 10 00:46:16.890533 env[1218]: time="2025-07-10T00:46:16.890478873Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f67db6b86-l28z9,Uid:213935fc-36c6-4ee5-b2cd-1c20e5fa7b38,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:16.897446 kubelet[1971]: E0710 00:46:16.897403 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:16.898659 env[1218]: time="2025-07-10T00:46:16.898620803Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-94kwk,Uid:05bc4ecd-5ddb-447d-aa28-779912945b17,Namespace:kube-system,Attempt:0,}" Jul 10 00:46:16.913516 kubelet[1971]: E0710 00:46:16.913388 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:16.915084 env[1218]: time="2025-07-10T00:46:16.914943823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bfqjd,Uid:0f1b3610-3e8c-4388-b51e-1c24bd09f352,Namespace:kube-system,Attempt:0,}" Jul 10 00:46:16.918296 env[1218]: time="2025-07-10T00:46:16.918028267Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-l77g6,Uid:f3a3de79-f413-407b-88e4-bc07b12da4ed,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:46:16.923470 env[1218]: time="2025-07-10T00:46:16.923426833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-kt6p7,Uid:5e7425a3-9bb7-4635-92e8-137e4368d192,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:46:16.927633 env[1218]: time="2025-07-10T00:46:16.927600238Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-786d95bbc-n2wj7,Uid:c7eb19b2-5773-4960-8da1-d276ae70387a,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:16.929544 env[1218]: time="2025-07-10T00:46:16.929515241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vn467,Uid:30f21bda-1ba3-4bcb-b2d9-c0d594954ccd,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:17.142103 env[1218]: time="2025-07-10T00:46:17.141949772Z" level=error msg="Failed to destroy network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.142570 env[1218]: time="2025-07-10T00:46:17.142442413Z" level=error msg="encountered an error cleaning up failed sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.142630 env[1218]: time="2025-07-10T00:46:17.142600813Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-kt6p7,Uid:5e7425a3-9bb7-4635-92e8-137e4368d192,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.143253 kubelet[1971]: E0710 00:46:17.142842 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.143253 kubelet[1971]: E0710 00:46:17.142925 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" Jul 10 00:46:17.143253 kubelet[1971]: E0710 00:46:17.142946 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" Jul 10 00:46:17.144654 kubelet[1971]: E0710 00:46:17.143008 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-56698484bf-kt6p7_calico-apiserver(5e7425a3-9bb7-4635-92e8-137e4368d192)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-56698484bf-kt6p7_calico-apiserver(5e7425a3-9bb7-4635-92e8-137e4368d192)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" podUID="5e7425a3-9bb7-4635-92e8-137e4368d192" Jul 10 00:46:17.144893 env[1218]: time="2025-07-10T00:46:17.144827176Z" level=error msg="Failed to destroy network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.146329 env[1218]: time="2025-07-10T00:46:17.146278457Z" level=error msg="encountered an error cleaning up failed sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.146520 env[1218]: time="2025-07-10T00:46:17.146493257Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bfqjd,Uid:0f1b3610-3e8c-4388-b51e-1c24bd09f352,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.146653 env[1218]: time="2025-07-10T00:46:17.145728217Z" level=error msg="Failed to destroy network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.147145 kubelet[1971]: E0710 00:46:17.146805 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.147145 kubelet[1971]: E0710 00:46:17.146864 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-bfqjd" Jul 10 00:46:17.147145 kubelet[1971]: E0710 00:46:17.146881 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-bfqjd" Jul 10 00:46:17.148303 kubelet[1971]: E0710 00:46:17.146941 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-bfqjd_kube-system(0f1b3610-3e8c-4388-b51e-1c24bd09f352)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-bfqjd_kube-system(0f1b3610-3e8c-4388-b51e-1c24bd09f352)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-bfqjd" podUID="0f1b3610-3e8c-4388-b51e-1c24bd09f352" Jul 10 00:46:17.148719 env[1218]: time="2025-07-10T00:46:17.148681980Z" level=error msg="encountered an error cleaning up failed sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.149861 env[1218]: time="2025-07-10T00:46:17.149773301Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f67db6b86-l28z9,Uid:213935fc-36c6-4ee5-b2cd-1c20e5fa7b38,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.150178 kubelet[1971]: E0710 00:46:17.150135 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.150236 kubelet[1971]: E0710 00:46:17.150187 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" Jul 10 00:46:17.150236 kubelet[1971]: E0710 00:46:17.150204 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" Jul 10 00:46:17.150294 kubelet[1971]: E0710 00:46:17.150248 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6f67db6b86-l28z9_calico-system(213935fc-36c6-4ee5-b2cd-1c20e5fa7b38)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6f67db6b86-l28z9_calico-system(213935fc-36c6-4ee5-b2cd-1c20e5fa7b38)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" podUID="213935fc-36c6-4ee5-b2cd-1c20e5fa7b38" Jul 10 00:46:17.151961 env[1218]: time="2025-07-10T00:46:17.151783704Z" level=error msg="Failed to destroy network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.152166 env[1218]: time="2025-07-10T00:46:17.152126984Z" level=error msg="encountered an error cleaning up failed sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.152210 env[1218]: time="2025-07-10T00:46:17.152176904Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-94kwk,Uid:05bc4ecd-5ddb-447d-aa28-779912945b17,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.152479 kubelet[1971]: E0710 00:46:17.152338 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.152479 kubelet[1971]: E0710 00:46:17.152384 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-94kwk" Jul 10 00:46:17.152479 kubelet[1971]: E0710 00:46:17.152402 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-94kwk" Jul 10 00:46:17.152588 kubelet[1971]: E0710 00:46:17.152440 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-94kwk_kube-system(05bc4ecd-5ddb-447d-aa28-779912945b17)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-94kwk_kube-system(05bc4ecd-5ddb-447d-aa28-779912945b17)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-94kwk" podUID="05bc4ecd-5ddb-447d-aa28-779912945b17" Jul 10 00:46:17.169805 env[1218]: time="2025-07-10T00:46:17.169751764Z" level=error msg="Failed to destroy network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.170212 env[1218]: time="2025-07-10T00:46:17.170178685Z" level=error msg="Failed to destroy network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.170719 env[1218]: time="2025-07-10T00:46:17.170688045Z" level=error msg="encountered an error cleaning up failed sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.170882 env[1218]: time="2025-07-10T00:46:17.170852686Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-786d95bbc-n2wj7,Uid:c7eb19b2-5773-4960-8da1-d276ae70387a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.171031 env[1218]: time="2025-07-10T00:46:17.170480805Z" level=error msg="encountered an error cleaning up failed sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.171159 env[1218]: time="2025-07-10T00:46:17.171110806Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-l77g6,Uid:f3a3de79-f413-407b-88e4-bc07b12da4ed,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.171230 kubelet[1971]: E0710 00:46:17.171160 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.171274 kubelet[1971]: E0710 00:46:17.171229 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-786d95bbc-n2wj7" Jul 10 00:46:17.171274 kubelet[1971]: E0710 00:46:17.171249 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-786d95bbc-n2wj7" Jul 10 00:46:17.171347 kubelet[1971]: E0710 00:46:17.171302 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-786d95bbc-n2wj7_calico-system(c7eb19b2-5773-4960-8da1-d276ae70387a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-786d95bbc-n2wj7_calico-system(c7eb19b2-5773-4960-8da1-d276ae70387a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-786d95bbc-n2wj7" podUID="c7eb19b2-5773-4960-8da1-d276ae70387a" Jul 10 00:46:17.171709 kubelet[1971]: E0710 00:46:17.171527 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.171709 kubelet[1971]: E0710 00:46:17.171570 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" Jul 10 00:46:17.171709 kubelet[1971]: E0710 00:46:17.171587 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" Jul 10 00:46:17.171852 kubelet[1971]: E0710 00:46:17.171644 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-56698484bf-l77g6_calico-apiserver(f3a3de79-f413-407b-88e4-bc07b12da4ed)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-56698484bf-l77g6_calico-apiserver(f3a3de79-f413-407b-88e4-bc07b12da4ed)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" podUID="f3a3de79-f413-407b-88e4-bc07b12da4ed" Jul 10 00:46:17.180425 env[1218]: time="2025-07-10T00:46:17.180371377Z" level=error msg="Failed to destroy network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.180718 env[1218]: time="2025-07-10T00:46:17.180669297Z" level=error msg="encountered an error cleaning up failed sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.180761 env[1218]: time="2025-07-10T00:46:17.180732577Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vn467,Uid:30f21bda-1ba3-4bcb-b2d9-c0d594954ccd,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.181216 kubelet[1971]: E0710 00:46:17.180928 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.181216 kubelet[1971]: E0710 00:46:17.180972 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-vn467" Jul 10 00:46:17.181216 kubelet[1971]: E0710 00:46:17.180989 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-vn467" Jul 10 00:46:17.181394 kubelet[1971]: E0710 00:46:17.181032 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-vn467_calico-system(30f21bda-1ba3-4bcb-b2d9-c0d594954ccd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-vn467_calico-system(30f21bda-1ba3-4bcb-b2d9-c0d594954ccd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-vn467" podUID="30f21bda-1ba3-4bcb-b2d9-c0d594954ccd" Jul 10 00:46:17.263778 kubelet[1971]: I0710 00:46:17.263751 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:17.264661 env[1218]: time="2025-07-10T00:46:17.264622714Z" level=info msg="StopPodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\"" Jul 10 00:46:17.265735 kubelet[1971]: I0710 00:46:17.265651 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:17.267456 env[1218]: time="2025-07-10T00:46:17.267199917Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:46:17.270871 env[1218]: time="2025-07-10T00:46:17.270790521Z" level=info msg="StopPodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\"" Jul 10 00:46:17.274655 kubelet[1971]: I0710 00:46:17.274629 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:17.276239 env[1218]: time="2025-07-10T00:46:17.276193168Z" level=info msg="StopPodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\"" Jul 10 00:46:17.278583 kubelet[1971]: I0710 00:46:17.278548 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:17.279211 env[1218]: time="2025-07-10T00:46:17.279174611Z" level=info msg="StopPodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\"" Jul 10 00:46:17.282723 kubelet[1971]: I0710 00:46:17.282695 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:17.283214 env[1218]: time="2025-07-10T00:46:17.283187216Z" level=info msg="StopPodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\"" Jul 10 00:46:17.284563 kubelet[1971]: I0710 00:46:17.284538 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:17.285458 env[1218]: time="2025-07-10T00:46:17.285425098Z" level=info msg="StopPodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\"" Jul 10 00:46:17.286762 kubelet[1971]: I0710 00:46:17.286735 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:17.287317 env[1218]: time="2025-07-10T00:46:17.287277780Z" level=info msg="StopPodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\"" Jul 10 00:46:17.313935 env[1218]: time="2025-07-10T00:46:17.313880091Z" level=error msg="StopPodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" failed" error="failed to destroy network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.317129 kubelet[1971]: E0710 00:46:17.317082 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:17.317267 kubelet[1971]: E0710 00:46:17.317212 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b"} Jul 10 00:46:17.317313 kubelet[1971]: E0710 00:46:17.317280 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"05bc4ecd-5ddb-447d-aa28-779912945b17\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.317370 kubelet[1971]: E0710 00:46:17.317310 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"05bc4ecd-5ddb-447d-aa28-779912945b17\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-94kwk" podUID="05bc4ecd-5ddb-447d-aa28-779912945b17" Jul 10 00:46:17.327273 env[1218]: time="2025-07-10T00:46:17.327212147Z" level=error msg="StopPodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" failed" error="failed to destroy network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.327596 kubelet[1971]: E0710 00:46:17.327542 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:17.327662 kubelet[1971]: E0710 00:46:17.327606 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f"} Jul 10 00:46:17.327662 kubelet[1971]: E0710 00:46:17.327638 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5e7425a3-9bb7-4635-92e8-137e4368d192\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.327739 kubelet[1971]: E0710 00:46:17.327659 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5e7425a3-9bb7-4635-92e8-137e4368d192\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" podUID="5e7425a3-9bb7-4635-92e8-137e4368d192" Jul 10 00:46:17.337300 env[1218]: time="2025-07-10T00:46:17.337243558Z" level=error msg="StopPodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" failed" error="failed to destroy network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.337678 kubelet[1971]: E0710 00:46:17.337540 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:17.337678 kubelet[1971]: E0710 00:46:17.337588 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a"} Jul 10 00:46:17.337678 kubelet[1971]: E0710 00:46:17.337620 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.337678 kubelet[1971]: E0710 00:46:17.337640 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" podUID="213935fc-36c6-4ee5-b2cd-1c20e5fa7b38" Jul 10 00:46:17.340572 env[1218]: time="2025-07-10T00:46:17.340522402Z" level=error msg="StopPodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" failed" error="failed to destroy network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.340748 kubelet[1971]: E0710 00:46:17.340709 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:17.340831 kubelet[1971]: E0710 00:46:17.340759 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635"} Jul 10 00:46:17.340831 kubelet[1971]: E0710 00:46:17.340789 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.340962 kubelet[1971]: E0710 00:46:17.340830 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-vn467" podUID="30f21bda-1ba3-4bcb-b2d9-c0d594954ccd" Jul 10 00:46:17.342239 env[1218]: time="2025-07-10T00:46:17.342195004Z" level=error msg="StopPodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" failed" error="failed to destroy network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.342468 kubelet[1971]: E0710 00:46:17.342432 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:17.342526 kubelet[1971]: E0710 00:46:17.342473 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1"} Jul 10 00:46:17.342526 kubelet[1971]: E0710 00:46:17.342502 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c7eb19b2-5773-4960-8da1-d276ae70387a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.342526 kubelet[1971]: E0710 00:46:17.342519 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c7eb19b2-5773-4960-8da1-d276ae70387a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-786d95bbc-n2wj7" podUID="c7eb19b2-5773-4960-8da1-d276ae70387a" Jul 10 00:46:17.344273 env[1218]: time="2025-07-10T00:46:17.344231446Z" level=error msg="StopPodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" failed" error="failed to destroy network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.344477 kubelet[1971]: E0710 00:46:17.344446 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:17.344537 kubelet[1971]: E0710 00:46:17.344484 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718"} Jul 10 00:46:17.344537 kubelet[1971]: E0710 00:46:17.344518 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f3a3de79-f413-407b-88e4-bc07b12da4ed\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.344616 kubelet[1971]: E0710 00:46:17.344535 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f3a3de79-f413-407b-88e4-bc07b12da4ed\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" podUID="f3a3de79-f413-407b-88e4-bc07b12da4ed" Jul 10 00:46:17.345602 env[1218]: time="2025-07-10T00:46:17.345567288Z" level=error msg="StopPodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" failed" error="failed to destroy network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:17.345860 kubelet[1971]: E0710 00:46:17.345745 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:17.345860 kubelet[1971]: E0710 00:46:17.345777 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86"} Jul 10 00:46:17.345860 kubelet[1971]: E0710 00:46:17.345799 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0f1b3610-3e8c-4388-b51e-1c24bd09f352\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:17.345860 kubelet[1971]: E0710 00:46:17.345833 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0f1b3610-3e8c-4388-b51e-1c24bd09f352\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-bfqjd" podUID="0f1b3610-3e8c-4388-b51e-1c24bd09f352" Jul 10 00:46:18.203607 systemd[1]: Created slice kubepods-besteffort-pod97c6e12f_0612_407a_922b_196d3c8b2bc5.slice. Jul 10 00:46:18.208116 env[1218]: time="2025-07-10T00:46:18.208071271Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlxl2,Uid:97c6e12f-0612-407a-922b-196d3c8b2bc5,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:18.300778 env[1218]: time="2025-07-10T00:46:18.300717172Z" level=error msg="Failed to destroy network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:18.303574 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c-shm.mount: Deactivated successfully. Jul 10 00:46:18.307403 env[1218]: time="2025-07-10T00:46:18.307334459Z" level=error msg="encountered an error cleaning up failed sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:18.307517 env[1218]: time="2025-07-10T00:46:18.307427659Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlxl2,Uid:97c6e12f-0612-407a-922b-196d3c8b2bc5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:18.308030 kubelet[1971]: E0710 00:46:18.307971 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:18.308328 kubelet[1971]: E0710 00:46:18.308048 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:18.308328 kubelet[1971]: E0710 00:46:18.308083 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qlxl2" Jul 10 00:46:18.308328 kubelet[1971]: E0710 00:46:18.308128 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-qlxl2_calico-system(97c6e12f-0612-407a-922b-196d3c8b2bc5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-qlxl2_calico-system(97c6e12f-0612-407a-922b-196d3c8b2bc5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qlxl2" podUID="97c6e12f-0612-407a-922b-196d3c8b2bc5" Jul 10 00:46:19.292088 kubelet[1971]: I0710 00:46:19.291457 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:19.292470 env[1218]: time="2025-07-10T00:46:19.292433228Z" level=info msg="StopPodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\"" Jul 10 00:46:19.317421 env[1218]: time="2025-07-10T00:46:19.317365134Z" level=error msg="StopPodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" failed" error="failed to destroy network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:46:19.317826 kubelet[1971]: E0710 00:46:19.317774 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:19.318090 kubelet[1971]: E0710 00:46:19.317835 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c"} Jul 10 00:46:19.318090 kubelet[1971]: E0710 00:46:19.317871 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"97c6e12f-0612-407a-922b-196d3c8b2bc5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:46:19.318090 kubelet[1971]: E0710 00:46:19.317891 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"97c6e12f-0612-407a-922b-196d3c8b2bc5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qlxl2" podUID="97c6e12f-0612-407a-922b-196d3c8b2bc5" Jul 10 00:46:21.790505 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2433568334.mount: Deactivated successfully. Jul 10 00:46:21.937496 env[1218]: time="2025-07-10T00:46:21.937448301Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:21.942020 env[1218]: time="2025-07-10T00:46:21.941426464Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:21.943933 env[1218]: time="2025-07-10T00:46:21.943330226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:21.944847 env[1218]: time="2025-07-10T00:46:21.944806067Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:21.945192 env[1218]: time="2025-07-10T00:46:21.945152827Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 10 00:46:21.959786 env[1218]: time="2025-07-10T00:46:21.959731040Z" level=info msg="CreateContainer within sandbox \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:46:21.971793 env[1218]: time="2025-07-10T00:46:21.971730091Z" level=info msg="CreateContainer within sandbox \"7334c093cdace532502751176091979faed6d2b0ae89ad0e88dbc1fb537e1ddc\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac\"" Jul 10 00:46:21.973366 env[1218]: time="2025-07-10T00:46:21.972648852Z" level=info msg="StartContainer for \"71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac\"" Jul 10 00:46:21.994300 systemd[1]: Started cri-containerd-71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac.scope. Jul 10 00:46:22.028000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.032019 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 10 00:46:22.032094 kernel: audit: type=1400 audit(1752108382.028:1042): avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.032122 kernel: audit: type=1300 audit(1752108382.028:1042): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2531 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:22.028000 audit[3275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2531 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:22.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663038643938643430386138666533626264623836303438353765 Jul 10 00:46:22.039001 kernel: audit: type=1327 audit(1752108382.028:1042): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663038643938643430386138666533626264623836303438353765 Jul 10 00:46:22.039072 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.043696 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.046484 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.046551 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.051223 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.051298 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.056834 kernel: audit: type=1400 audit(1752108382.030:1043): avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.030000 audit: BPF prog-id=143 op=LOAD Jul 10 00:46:22.030000 audit[3275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2531 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:22.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663038643938643430386138666533626264623836303438353765 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.031000 audit: BPF prog-id=144 op=LOAD Jul 10 00:46:22.031000 audit[3275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2531 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:22.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663038643938643430386138666533626264623836303438353765 Jul 10 00:46:22.034000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:46:22.034000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { perfmon } for pid=3275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit[3275]: AVC avc: denied { bpf } for pid=3275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:22.034000 audit: BPF prog-id=145 op=LOAD Jul 10 00:46:22.034000 audit[3275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2531 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:22.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663038643938643430386138666533626264623836303438353765 Jul 10 00:46:22.058019 env[1218]: time="2025-07-10T00:46:22.057329365Z" level=info msg="StartContainer for \"71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac\" returns successfully" Jul 10 00:46:22.264998 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:46:22.265125 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:46:22.383068 kubelet[1971]: I0710 00:46:22.383003 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-gpt5x" podStartSLOduration=1.042412621 podStartE2EDuration="12.382983318s" podCreationTimestamp="2025-07-10 00:46:10 +0000 UTC" firstStartedPulling="2025-07-10 00:46:10.605666891 +0000 UTC m=+20.513917422" lastFinishedPulling="2025-07-10 00:46:21.946237588 +0000 UTC m=+31.854488119" observedRunningTime="2025-07-10 00:46:22.316016221 +0000 UTC m=+32.224266792" watchObservedRunningTime="2025-07-10 00:46:22.382983318 +0000 UTC m=+32.291233849" Jul 10 00:46:22.385682 env[1218]: time="2025-07-10T00:46:22.385640360Z" level=info msg="StopPodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\"" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.486 [INFO][3349] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.486 [INFO][3349] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" iface="eth0" netns="/var/run/netns/cni-34697a90-59d0-5a1f-7d1d-3f0bd120374d" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.487 [INFO][3349] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" iface="eth0" netns="/var/run/netns/cni-34697a90-59d0-5a1f-7d1d-3f0bd120374d" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.489 [INFO][3349] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" iface="eth0" netns="/var/run/netns/cni-34697a90-59d0-5a1f-7d1d-3f0bd120374d" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.489 [INFO][3349] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.489 [INFO][3349] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.589 [INFO][3364] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.589 [INFO][3364] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.589 [INFO][3364] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.600 [WARNING][3364] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.600 [INFO][3364] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.605 [INFO][3364] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:22.608829 env[1218]: 2025-07-10 00:46:22.607 [INFO][3349] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:22.609590 env[1218]: time="2025-07-10T00:46:22.609557588Z" level=info msg="TearDown network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" successfully" Jul 10 00:46:22.609679 env[1218]: time="2025-07-10T00:46:22.609662788Z" level=info msg="StopPodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" returns successfully" Jul 10 00:46:22.633452 kubelet[1971]: I0710 00:46:22.633344 1971 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-ca-bundle\") pod \"c7eb19b2-5773-4960-8da1-d276ae70387a\" (UID: \"c7eb19b2-5773-4960-8da1-d276ae70387a\") " Jul 10 00:46:22.633452 kubelet[1971]: I0710 00:46:22.633413 1971 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-backend-key-pair\") pod \"c7eb19b2-5773-4960-8da1-d276ae70387a\" (UID: \"c7eb19b2-5773-4960-8da1-d276ae70387a\") " Jul 10 00:46:22.633452 kubelet[1971]: I0710 00:46:22.633444 1971 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mj8xz\" (UniqueName: \"kubernetes.io/projected/c7eb19b2-5773-4960-8da1-d276ae70387a-kube-api-access-mj8xz\") pod \"c7eb19b2-5773-4960-8da1-d276ae70387a\" (UID: \"c7eb19b2-5773-4960-8da1-d276ae70387a\") " Jul 10 00:46:22.635340 kubelet[1971]: I0710 00:46:22.635299 1971 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "c7eb19b2-5773-4960-8da1-d276ae70387a" (UID: "c7eb19b2-5773-4960-8da1-d276ae70387a"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 10 00:46:22.639396 kubelet[1971]: I0710 00:46:22.639309 1971 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "c7eb19b2-5773-4960-8da1-d276ae70387a" (UID: "c7eb19b2-5773-4960-8da1-d276ae70387a"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 00:46:22.639513 kubelet[1971]: I0710 00:46:22.639434 1971 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c7eb19b2-5773-4960-8da1-d276ae70387a-kube-api-access-mj8xz" (OuterVolumeSpecName: "kube-api-access-mj8xz") pod "c7eb19b2-5773-4960-8da1-d276ae70387a" (UID: "c7eb19b2-5773-4960-8da1-d276ae70387a"). InnerVolumeSpecName "kube-api-access-mj8xz". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 00:46:22.733723 kubelet[1971]: I0710 00:46:22.733677 1971 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:46:22.733723 kubelet[1971]: I0710 00:46:22.733711 1971 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-mj8xz\" (UniqueName: \"kubernetes.io/projected/c7eb19b2-5773-4960-8da1-d276ae70387a-kube-api-access-mj8xz\") on node \"localhost\" DevicePath \"\"" Jul 10 00:46:22.733723 kubelet[1971]: I0710 00:46:22.733721 1971 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c7eb19b2-5773-4960-8da1-d276ae70387a-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:46:22.791432 systemd[1]: run-netns-cni\x2d34697a90\x2d59d0\x2d5a1f\x2d7d1d\x2d3f0bd120374d.mount: Deactivated successfully. Jul 10 00:46:22.791529 systemd[1]: var-lib-kubelet-pods-c7eb19b2\x2d5773\x2d4960\x2d8da1\x2dd276ae70387a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmj8xz.mount: Deactivated successfully. Jul 10 00:46:22.791590 systemd[1]: var-lib-kubelet-pods-c7eb19b2\x2d5773\x2d4960\x2d8da1\x2dd276ae70387a-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:46:23.303248 systemd[1]: Removed slice kubepods-besteffort-podc7eb19b2_5773_4960_8da1_d276ae70387a.slice. Jul 10 00:46:23.319805 systemd[1]: run-containerd-runc-k8s.io-71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac-runc.RQ6mu5.mount: Deactivated successfully. Jul 10 00:46:23.376605 systemd[1]: Created slice kubepods-besteffort-podc2966b39_cda3_4ecb_b5e3_0ecbae21ffcf.slice. Jul 10 00:46:23.437503 kubelet[1971]: I0710 00:46:23.437453 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf-whisker-backend-key-pair\") pod \"whisker-6486648d8f-sfz2j\" (UID: \"c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf\") " pod="calico-system/whisker-6486648d8f-sfz2j" Jul 10 00:46:23.437503 kubelet[1971]: I0710 00:46:23.437497 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf-whisker-ca-bundle\") pod \"whisker-6486648d8f-sfz2j\" (UID: \"c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf\") " pod="calico-system/whisker-6486648d8f-sfz2j" Jul 10 00:46:23.437904 kubelet[1971]: I0710 00:46:23.437524 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t7w87\" (UniqueName: \"kubernetes.io/projected/c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf-kube-api-access-t7w87\") pod \"whisker-6486648d8f-sfz2j\" (UID: \"c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf\") " pod="calico-system/whisker-6486648d8f-sfz2j" Jul 10 00:46:23.646000 audit[3474]: AVC avc: denied { write } for pid=3474 comm="tee" name="fd" dev="proc" ino=17286 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.646000 audit[3474]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff1e9c7e5 a2=241 a3=1b6 items=1 ppid=3421 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.646000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:46:23.646000 audit: PATH item=0 name="/dev/fd/63" inode=20165 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.646000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.661000 audit[3487]: AVC avc: denied { write } for pid=3487 comm="tee" name="fd" dev="proc" ino=20176 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.661000 audit[3487]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd004c7e7 a2=241 a3=1b6 items=1 ppid=3417 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.661000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:46:23.661000 audit: PATH item=0 name="/dev/fd/63" inode=20169 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.661000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.677000 audit[3493]: AVC avc: denied { write } for pid=3493 comm="tee" name="fd" dev="proc" ino=20182 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.677000 audit[3493]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7a257e5 a2=241 a3=1b6 items=1 ppid=3430 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.677000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:46:23.677000 audit: PATH item=0 name="/dev/fd/63" inode=18143 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.677000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.679992 env[1218]: time="2025-07-10T00:46:23.679955049Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6486648d8f-sfz2j,Uid:c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf,Namespace:calico-system,Attempt:0,}" Jul 10 00:46:23.682000 audit[3477]: AVC avc: denied { write } for pid=3477 comm="tee" name="fd" dev="proc" ino=17296 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.682000 audit[3477]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe82757e6 a2=241 a3=1b6 items=1 ppid=3429 pid=3477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.682000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:46:23.682000 audit: PATH item=0 name="/dev/fd/63" inode=20166 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.682000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.687000 audit[3492]: AVC avc: denied { write } for pid=3492 comm="tee" name="fd" dev="proc" ino=18146 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.687000 audit[3492]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff2c7e7d5 a2=241 a3=1b6 items=1 ppid=3424 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.687000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:46:23.687000 audit: PATH item=0 name="/dev/fd/63" inode=19224 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.687000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.688000 audit[3479]: AVC avc: denied { write } for pid=3479 comm="tee" name="fd" dev="proc" ino=18150 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.688000 audit[3479]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe92b67d6 a2=241 a3=1b6 items=1 ppid=3418 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.688000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:46:23.688000 audit: PATH item=0 name="/dev/fd/63" inode=17290 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.688000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.690000 audit[3484]: AVC avc: denied { write } for pid=3484 comm="tee" name="fd" dev="proc" ino=18154 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:46:23.690000 audit[3484]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff47d27e5 a2=241 a3=1b6 items=1 ppid=3420 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.690000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:46:23.690000 audit: PATH item=0 name="/dev/fd/63" inode=17291 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:23.690000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:46:23.859793 systemd-networkd[1043]: cali8adf77b26b1: Link UP Jul 10 00:46:23.862444 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:46:23.862529 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8adf77b26b1: link becomes ready Jul 10 00:46:23.862491 systemd-networkd[1043]: cali8adf77b26b1: Gained carrier Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.743 [INFO][3504] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.760 [INFO][3504] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--6486648d8f--sfz2j-eth0 whisker-6486648d8f- calico-system c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf 960 0 2025-07-10 00:46:23 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6486648d8f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-6486648d8f-sfz2j eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali8adf77b26b1 [] [] }} ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.760 [INFO][3504] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.797 [INFO][3521] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" HandleID="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Workload="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.797 [INFO][3521] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" HandleID="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Workload="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003555f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-6486648d8f-sfz2j", "timestamp":"2025-07-10 00:46:23.797457222 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.797 [INFO][3521] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.797 [INFO][3521] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.797 [INFO][3521] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.813 [INFO][3521] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.830 [INFO][3521] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.835 [INFO][3521] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.837 [INFO][3521] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.839 [INFO][3521] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.839 [INFO][3521] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.840 [INFO][3521] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019 Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.844 [INFO][3521] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.849 [INFO][3521] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.849 [INFO][3521] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" host="localhost" Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.849 [INFO][3521] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:23.877074 env[1218]: 2025-07-10 00:46:23.849 [INFO][3521] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" HandleID="k8s-pod-network.429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Workload="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.877697 env[1218]: 2025-07-10 00:46:23.851 [INFO][3504] cni-plugin/k8s.go 418: Populated endpoint ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6486648d8f--sfz2j-eth0", GenerateName:"whisker-6486648d8f-", Namespace:"calico-system", SelfLink:"", UID:"c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6486648d8f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-6486648d8f-sfz2j", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali8adf77b26b1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:23.877697 env[1218]: 2025-07-10 00:46:23.851 [INFO][3504] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.877697 env[1218]: 2025-07-10 00:46:23.851 [INFO][3504] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8adf77b26b1 ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.877697 env[1218]: 2025-07-10 00:46:23.863 [INFO][3504] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.877697 env[1218]: 2025-07-10 00:46:23.863 [INFO][3504] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6486648d8f--sfz2j-eth0", GenerateName:"whisker-6486648d8f-", Namespace:"calico-system", SelfLink:"", UID:"c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6486648d8f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019", Pod:"whisker-6486648d8f-sfz2j", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali8adf77b26b1", MAC:"86:f5:6e:2e:ec:cc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:23.877697 env[1218]: 2025-07-10 00:46:23.874 [INFO][3504] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019" Namespace="calico-system" Pod="whisker-6486648d8f-sfz2j" WorkloadEndpoint="localhost-k8s-whisker--6486648d8f--sfz2j-eth0" Jul 10 00:46:23.886609 env[1218]: time="2025-07-10T00:46:23.886545812Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:23.886609 env[1218]: time="2025-07-10T00:46:23.886588412Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:23.886609 env[1218]: time="2025-07-10T00:46:23.886599092Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:23.887107 env[1218]: time="2025-07-10T00:46:23.887008012Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019 pid=3545 runtime=io.containerd.runc.v2 Jul 10 00:46:23.902398 systemd[1]: Started cri-containerd-429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019.scope. Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.965000 audit: BPF prog-id=146 op=LOAD Jul 10 00:46:23.966000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.966000 audit[3555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3545 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432396635653866666235363662613436393130393961666532653831 Jul 10 00:46:23.966000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.966000 audit[3555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3545 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432396635653866666235363662613436393130393961666532653831 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit: BPF prog-id=147 op=LOAD Jul 10 00:46:23.967000 audit[3555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3545 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432396635653866666235363662613436393130393961666532653831 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.967000 audit: BPF prog-id=148 op=LOAD Jul 10 00:46:23.967000 audit[3555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3545 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432396635653866666235363662613436393130393961666532653831 Jul 10 00:46:23.968000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:46:23.968000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:23.968000 audit: BPF prog-id=149 op=LOAD Jul 10 00:46:23.968000 audit[3555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3545 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:23.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432396635653866666235363662613436393130393961666532653831 Jul 10 00:46:23.970436 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:23.987054 env[1218]: time="2025-07-10T00:46:23.987008371Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6486648d8f-sfz2j,Uid:c2966b39-cda3-4ecb-b5e3-0ecbae21ffcf,Namespace:calico-system,Attempt:0,} returns sandbox id \"429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019\"" Jul 10 00:46:23.989472 env[1218]: time="2025-07-10T00:46:23.989428653Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:46:24.199428 kubelet[1971]: I0710 00:46:24.199303 1971 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="c7eb19b2-5773-4960-8da1-d276ae70387a" path="/var/lib/kubelet/pods/c7eb19b2-5773-4960-8da1-d276ae70387a/volumes" Jul 10 00:46:24.317547 systemd[1]: run-containerd-runc-k8s.io-71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac-runc.kZn2mH.mount: Deactivated successfully. Jul 10 00:46:25.130936 env[1218]: time="2025-07-10T00:46:25.130889088Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:25.132250 env[1218]: time="2025-07-10T00:46:25.132224169Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:25.133798 env[1218]: time="2025-07-10T00:46:25.133772570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:25.135443 env[1218]: time="2025-07-10T00:46:25.135404171Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:25.136104 env[1218]: time="2025-07-10T00:46:25.136074932Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 10 00:46:25.139786 env[1218]: time="2025-07-10T00:46:25.139748814Z" level=info msg="CreateContainer within sandbox \"429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:46:25.152949 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2111231341.mount: Deactivated successfully. Jul 10 00:46:25.155363 env[1218]: time="2025-07-10T00:46:25.155327745Z" level=info msg="CreateContainer within sandbox \"429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"511f921373a1980cc992fdf669b9506c22850003d40ce1a866bc53657506ffae\"" Jul 10 00:46:25.155961 env[1218]: time="2025-07-10T00:46:25.155861226Z" level=info msg="StartContainer for \"511f921373a1980cc992fdf669b9506c22850003d40ce1a866bc53657506ffae\"" Jul 10 00:46:25.176279 systemd[1]: Started cri-containerd-511f921373a1980cc992fdf669b9506c22850003d40ce1a866bc53657506ffae.scope. Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit: BPF prog-id=150 op=LOAD Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3545 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:25.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531316639323133373361313938306363393932666466363639623935 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3545 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:25.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531316639323133373361313938306363393932666466363639623935 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit: BPF prog-id=151 op=LOAD Jul 10 00:46:25.194000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3545 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:25.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531316639323133373361313938306363393932666466363639623935 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.194000 audit: BPF prog-id=152 op=LOAD Jul 10 00:46:25.194000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3545 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:25.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531316639323133373361313938306363393932666466363639623935 Jul 10 00:46:25.195000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:46:25.195000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:25.195000 audit: BPF prog-id=153 op=LOAD Jul 10 00:46:25.195000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3545 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:25.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531316639323133373361313938306363393932666466363639623935 Jul 10 00:46:25.214254 env[1218]: time="2025-07-10T00:46:25.213962186Z" level=info msg="StartContainer for \"511f921373a1980cc992fdf669b9506c22850003d40ce1a866bc53657506ffae\" returns successfully" Jul 10 00:46:25.216146 env[1218]: time="2025-07-10T00:46:25.216088507Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:46:25.232000 audit[3640]: AVC avc: denied { search } for pid=3640 comm="nginx" name="crypto" dev="proc" ino=20299 scontext=system_u:system_r:svirt_lxc_net_t:s0:c270,c897 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:46:25.232000 audit[3640]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff94ef4958 a2=0 a3=0 items=0 ppid=3545 pid=3640 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c270,c897 key=(null) Jul 10 00:46:25.232000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:46:25.566943 systemd-networkd[1043]: cali8adf77b26b1: Gained IPv6LL Jul 10 00:46:26.866805 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3693244957.mount: Deactivated successfully. Jul 10 00:46:26.967839 env[1218]: time="2025-07-10T00:46:26.967776435Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:26.971479 env[1218]: time="2025-07-10T00:46:26.970757397Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:26.974084 env[1218]: time="2025-07-10T00:46:26.973989159Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:26.980879 env[1218]: time="2025-07-10T00:46:26.975847841Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:26.980879 env[1218]: time="2025-07-10T00:46:26.976416521Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 10 00:46:27.004291 env[1218]: time="2025-07-10T00:46:27.004239339Z" level=info msg="CreateContainer within sandbox \"429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:46:27.060768 env[1218]: time="2025-07-10T00:46:27.060711893Z" level=info msg="CreateContainer within sandbox \"429f5e8ffb566ba4691099afe2e81ce18d97d557e12b90654098b9b120b5e019\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"7ac255e1b70e4e9416ff214de9c9d7243a67efb2a2b79e9a276bbb8fd852ebce\"" Jul 10 00:46:27.061295 env[1218]: time="2025-07-10T00:46:27.061259774Z" level=info msg="StartContainer for \"7ac255e1b70e4e9416ff214de9c9d7243a67efb2a2b79e9a276bbb8fd852ebce\"" Jul 10 00:46:27.078557 systemd[1]: Started cri-containerd-7ac255e1b70e4e9416ff214de9c9d7243a67efb2a2b79e9a276bbb8fd852ebce.scope. Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.124224 kernel: kauditd_printk_skb: 185 callbacks suppressed Jul 10 00:46:27.124311 kernel: audit: type=1400 audit(1752108387.122:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.129151 kernel: audit: type=1400 audit(1752108387.122:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.129197 kernel: audit: type=1400 audit(1752108387.122:1094): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.131546 kernel: audit: type=1400 audit(1752108387.122:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.136435 kernel: audit: type=1400 audit(1752108387.122:1096): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.136500 kernel: audit: type=1400 audit(1752108387.122:1097): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.141273 kernel: audit: type=1400 audit(1752108387.122:1098): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.141322 kernel: audit: type=1400 audit(1752108387.122:1099): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.145974 kernel: audit: type=1400 audit(1752108387.122:1100): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.146047 kernel: audit: type=1400 audit(1752108387.123:1101): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.123000 audit: BPF prog-id=154 op=LOAD Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3545 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633235356531623730653465393431366666323134646539633964 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3545 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633235356531623730653465393431366666323134646539633964 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.127000 audit: BPF prog-id=155 op=LOAD Jul 10 00:46:27.127000 audit[3717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3545 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633235356531623730653465393431366666323134646539633964 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.128000 audit: BPF prog-id=156 op=LOAD Jul 10 00:46:27.128000 audit[3717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3545 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633235356531623730653465393431366666323134646539633964 Jul 10 00:46:27.130000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:46:27.130000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:27.130000 audit: BPF prog-id=157 op=LOAD Jul 10 00:46:27.130000 audit[3717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3545 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633235356531623730653465393431366666323134646539633964 Jul 10 00:46:27.159210 env[1218]: time="2025-07-10T00:46:27.159170393Z" level=info msg="StartContainer for \"7ac255e1b70e4e9416ff214de9c9d7243a67efb2a2b79e9a276bbb8fd852ebce\" returns successfully" Jul 10 00:46:27.321724 kubelet[1971]: I0710 00:46:27.321662 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6486648d8f-sfz2j" podStartSLOduration=1.32897686 podStartE2EDuration="4.321648772s" podCreationTimestamp="2025-07-10 00:46:23 +0000 UTC" firstStartedPulling="2025-07-10 00:46:23.988996772 +0000 UTC m=+33.897247303" lastFinishedPulling="2025-07-10 00:46:26.981668684 +0000 UTC m=+36.889919215" observedRunningTime="2025-07-10 00:46:27.320575211 +0000 UTC m=+37.228825742" watchObservedRunningTime="2025-07-10 00:46:27.321648772 +0000 UTC m=+37.229899303" Jul 10 00:46:27.324499 systemd[1]: run-containerd-runc-k8s.io-7ac255e1b70e4e9416ff214de9c9d7243a67efb2a2b79e9a276bbb8fd852ebce-runc.NrutKT.mount: Deactivated successfully. Jul 10 00:46:27.337000 audit[3748]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=3748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:27.337000 audit[3748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe6940310 a2=0 a3=1 items=0 ppid=2084 pid=3748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.337000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:27.350000 audit[3748]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=3748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:27.350000 audit[3748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe6940310 a2=0 a3=1 items=0 ppid=2084 pid=3748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:27.710601 systemd[1]: Started sshd@7-10.0.0.129:22-10.0.0.1:44544.service. Jul 10 00:46:27.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.129:22-10.0.0.1:44544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.747000 audit[3752]: USER_ACCT pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:27.748618 sshd[3752]: Accepted publickey for core from 10.0.0.1 port 44544 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:27.748000 audit[3752]: CRED_ACQ pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:27.748000 audit[3752]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f77910 a2=3 a3=1 items=0 ppid=1 pid=3752 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:27.748000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:27.749942 sshd[3752]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:27.753437 systemd-logind[1206]: New session 8 of user core. Jul 10 00:46:27.754320 systemd[1]: Started session-8.scope. Jul 10 00:46:27.757000 audit[3752]: USER_START pid=3752 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:27.758000 audit[3754]: CRED_ACQ pid=3754 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:27.933699 sshd[3752]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:27.933000 audit[3752]: USER_END pid=3752 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:27.933000 audit[3752]: CRED_DISP pid=3752 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:27.936222 systemd[1]: sshd@7-10.0.0.129:22-10.0.0.1:44544.service: Deactivated successfully. Jul 10 00:46:27.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.129:22-10.0.0.1:44544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.937027 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:46:27.937550 systemd-logind[1206]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:46:27.938177 systemd-logind[1206]: Removed session 8. Jul 10 00:46:28.198384 env[1218]: time="2025-07-10T00:46:28.198325896Z" level=info msg="StopPodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\"" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.244 [INFO][3799] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.245 [INFO][3799] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" iface="eth0" netns="/var/run/netns/cni-94ed622e-05d2-ba04-9dd1-a2622425f8f7" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.245 [INFO][3799] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" iface="eth0" netns="/var/run/netns/cni-94ed622e-05d2-ba04-9dd1-a2622425f8f7" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.245 [INFO][3799] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" iface="eth0" netns="/var/run/netns/cni-94ed622e-05d2-ba04-9dd1-a2622425f8f7" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.245 [INFO][3799] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.245 [INFO][3799] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.262 [INFO][3809] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.262 [INFO][3809] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.262 [INFO][3809] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.271 [WARNING][3809] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.271 [INFO][3809] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.274 [INFO][3809] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:28.277964 env[1218]: 2025-07-10 00:46:28.276 [INFO][3799] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:28.280848 env[1218]: time="2025-07-10T00:46:28.279920783Z" level=info msg="TearDown network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" successfully" Jul 10 00:46:28.280848 env[1218]: time="2025-07-10T00:46:28.279964623Z" level=info msg="StopPodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" returns successfully" Jul 10 00:46:28.281381 env[1218]: time="2025-07-10T00:46:28.281350264Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-kt6p7,Uid:5e7425a3-9bb7-4635-92e8-137e4368d192,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:46:28.281856 systemd[1]: run-netns-cni\x2d94ed622e\x2d05d2\x2dba04\x2d9dd1\x2da2622425f8f7.mount: Deactivated successfully. Jul 10 00:46:28.401387 systemd-networkd[1043]: cali75d67c3d7c7: Link UP Jul 10 00:46:28.403042 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:46:28.403105 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali75d67c3d7c7: link becomes ready Jul 10 00:46:28.403576 systemd-networkd[1043]: cali75d67c3d7c7: Gained carrier Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.320 [INFO][3817] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.335 [INFO][3817] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0 calico-apiserver-56698484bf- calico-apiserver 5e7425a3-9bb7-4635-92e8-137e4368d192 1022 0 2025-07-10 00:46:05 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:56698484bf projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-56698484bf-kt6p7 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali75d67c3d7c7 [] [] }} ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.335 [INFO][3817] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.358 [INFO][3831] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" HandleID="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.359 [INFO][3831] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" HandleID="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004de90), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-56698484bf-kt6p7", "timestamp":"2025-07-10 00:46:28.358646988 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.359 [INFO][3831] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.359 [INFO][3831] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.359 [INFO][3831] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.369 [INFO][3831] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.376 [INFO][3831] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.382 [INFO][3831] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.384 [INFO][3831] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.386 [INFO][3831] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.386 [INFO][3831] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.388 [INFO][3831] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80 Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.392 [INFO][3831] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.397 [INFO][3831] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.397 [INFO][3831] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" host="localhost" Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.398 [INFO][3831] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:28.415449 env[1218]: 2025-07-10 00:46:28.398 [INFO][3831] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" HandleID="k8s-pod-network.1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.416151 env[1218]: 2025-07-10 00:46:28.399 [INFO][3817] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7425a3-9bb7-4635-92e8-137e4368d192", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-56698484bf-kt6p7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali75d67c3d7c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:28.416151 env[1218]: 2025-07-10 00:46:28.399 [INFO][3817] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.416151 env[1218]: 2025-07-10 00:46:28.399 [INFO][3817] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali75d67c3d7c7 ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.416151 env[1218]: 2025-07-10 00:46:28.403 [INFO][3817] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.416151 env[1218]: 2025-07-10 00:46:28.403 [INFO][3817] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7425a3-9bb7-4635-92e8-137e4368d192", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80", Pod:"calico-apiserver-56698484bf-kt6p7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali75d67c3d7c7", MAC:"8e:30:5f:11:8a:97", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:28.416151 env[1218]: 2025-07-10 00:46:28.412 [INFO][3817] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-kt6p7" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:28.425067 env[1218]: time="2025-07-10T00:46:28.424985065Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:28.425195 env[1218]: time="2025-07-10T00:46:28.425077985Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:28.425195 env[1218]: time="2025-07-10T00:46:28.425106705Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:28.425416 env[1218]: time="2025-07-10T00:46:28.425312506Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80 pid=3854 runtime=io.containerd.runc.v2 Jul 10 00:46:28.441597 systemd[1]: run-containerd-runc-k8s.io-1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80-runc.KJQDQD.mount: Deactivated successfully. Jul 10 00:46:28.444283 systemd[1]: Started cri-containerd-1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80.scope. Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.477000 audit: BPF prog-id=158 op=LOAD Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3854 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:28.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393434383966363933636137616365613934633964353462376561 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3854 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:28.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393434383966363933636137616365613934633964353462376561 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit: BPF prog-id=159 op=LOAD Jul 10 00:46:28.478000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3854 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:28.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393434383966363933636137616365613934633964353462376561 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit: BPF prog-id=160 op=LOAD Jul 10 00:46:28.478000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3854 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:28.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393434383966363933636137616365613934633964353462376561 Jul 10 00:46:28.478000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:46:28.478000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:28.478000 audit: BPF prog-id=161 op=LOAD Jul 10 00:46:28.478000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3854 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:28.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393434383966363933636137616365613934633964353462376561 Jul 10 00:46:28.482738 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:28.500281 env[1218]: time="2025-07-10T00:46:28.500227908Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-kt6p7,Uid:5e7425a3-9bb7-4635-92e8-137e4368d192,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80\"" Jul 10 00:46:28.502440 env[1218]: time="2025-07-10T00:46:28.502383349Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:46:29.196047 env[1218]: time="2025-07-10T00:46:29.195991177Z" level=info msg="StopPodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\"" Jul 10 00:46:29.196224 env[1218]: time="2025-07-10T00:46:29.195991257Z" level=info msg="StopPodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\"" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.260 [INFO][3935] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.261 [INFO][3935] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" iface="eth0" netns="/var/run/netns/cni-afefbd7c-1290-21e4-2f6d-b739b0c8a754" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.261 [INFO][3935] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" iface="eth0" netns="/var/run/netns/cni-afefbd7c-1290-21e4-2f6d-b739b0c8a754" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.261 [INFO][3935] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" iface="eth0" netns="/var/run/netns/cni-afefbd7c-1290-21e4-2f6d-b739b0c8a754" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.261 [INFO][3935] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.261 [INFO][3935] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.292 [INFO][3953] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.292 [INFO][3953] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.292 [INFO][3953] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.301 [WARNING][3953] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.301 [INFO][3953] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.303 [INFO][3953] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:29.308420 env[1218]: 2025-07-10 00:46:29.306 [INFO][3935] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:29.309356 env[1218]: time="2025-07-10T00:46:29.309316038Z" level=info msg="TearDown network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" successfully" Jul 10 00:46:29.309434 env[1218]: time="2025-07-10T00:46:29.309418198Z" level=info msg="StopPodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" returns successfully" Jul 10 00:46:29.309886 kubelet[1971]: E0710 00:46:29.309857 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:29.311054 env[1218]: time="2025-07-10T00:46:29.311014999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bfqjd,Uid:0f1b3610-3e8c-4388-b51e-1c24bd09f352,Namespace:kube-system,Attempt:1,}" Jul 10 00:46:29.311199 systemd[1]: run-netns-cni\x2dafefbd7c\x2d1290\x2d21e4\x2d2f6d\x2db739b0c8a754.mount: Deactivated successfully. Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.258 [INFO][3929] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.258 [INFO][3929] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" iface="eth0" netns="/var/run/netns/cni-3ece95fe-be0f-ad08-decc-6496f3623938" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.259 [INFO][3929] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" iface="eth0" netns="/var/run/netns/cni-3ece95fe-be0f-ad08-decc-6496f3623938" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.260 [INFO][3929] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" iface="eth0" netns="/var/run/netns/cni-3ece95fe-be0f-ad08-decc-6496f3623938" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.260 [INFO][3929] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.260 [INFO][3929] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.296 [INFO][3951] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.297 [INFO][3951] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.303 [INFO][3951] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.318 [WARNING][3951] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.319 [INFO][3951] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.321 [INFO][3951] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:29.325158 env[1218]: 2025-07-10 00:46:29.323 [INFO][3929] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:29.327758 systemd[1]: run-netns-cni\x2d3ece95fe\x2dbe0f\x2dad08\x2ddecc\x2d6496f3623938.mount: Deactivated successfully. Jul 10 00:46:29.328225 env[1218]: time="2025-07-10T00:46:29.328189608Z" level=info msg="TearDown network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" successfully" Jul 10 00:46:29.328564 env[1218]: time="2025-07-10T00:46:29.328310328Z" level=info msg="StopPodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" returns successfully" Jul 10 00:46:29.330079 env[1218]: time="2025-07-10T00:46:29.330014849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vn467,Uid:30f21bda-1ba3-4bcb-b2d9-c0d594954ccd,Namespace:calico-system,Attempt:1,}" Jul 10 00:46:29.472361 systemd-networkd[1043]: cali0d5a00985b3: Link UP Jul 10 00:46:29.476773 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:46:29.476911 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0d5a00985b3: link becomes ready Jul 10 00:46:29.477462 systemd-networkd[1043]: cali0d5a00985b3: Gained carrier Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.353 [INFO][3967] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.369 [INFO][3967] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0 coredns-674b8bbfcf- kube-system 0f1b3610-3e8c-4388-b51e-1c24bd09f352 1041 0 2025-07-10 00:45:56 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-bfqjd eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0d5a00985b3 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.370 [INFO][3967] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.399 [INFO][3995] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" HandleID="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.399 [INFO][3995] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" HandleID="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c760), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-bfqjd", "timestamp":"2025-07-10 00:46:29.399470326 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.399 [INFO][3995] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.400 [INFO][3995] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.400 [INFO][3995] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.415 [INFO][3995] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.423 [INFO][3995] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.441 [INFO][3995] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.444 [INFO][3995] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.446 [INFO][3995] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.447 [INFO][3995] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.448 [INFO][3995] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.452 [INFO][3995] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.463 [INFO][3995] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.463 [INFO][3995] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" host="localhost" Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.463 [INFO][3995] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:29.493678 env[1218]: 2025-07-10 00:46:29.463 [INFO][3995] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" HandleID="k8s-pod-network.9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.494472 env[1218]: 2025-07-10 00:46:29.466 [INFO][3967] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0f1b3610-3e8c-4388-b51e-1c24bd09f352", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-bfqjd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d5a00985b3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:29.494472 env[1218]: 2025-07-10 00:46:29.466 [INFO][3967] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.494472 env[1218]: 2025-07-10 00:46:29.466 [INFO][3967] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0d5a00985b3 ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.494472 env[1218]: 2025-07-10 00:46:29.478 [INFO][3967] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.494472 env[1218]: 2025-07-10 00:46:29.479 [INFO][3967] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0f1b3610-3e8c-4388-b51e-1c24bd09f352", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d", Pod:"coredns-674b8bbfcf-bfqjd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d5a00985b3", MAC:"26:84:e0:b2:c6:03", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:29.494472 env[1218]: 2025-07-10 00:46:29.492 [INFO][3967] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d" Namespace="kube-system" Pod="coredns-674b8bbfcf-bfqjd" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:29.538144 env[1218]: time="2025-07-10T00:46:29.537935000Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:29.538144 env[1218]: time="2025-07-10T00:46:29.537980840Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:29.538144 env[1218]: time="2025-07-10T00:46:29.537990640Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:29.538532 env[1218]: time="2025-07-10T00:46:29.538445920Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d pid=4026 runtime=io.containerd.runc.v2 Jul 10 00:46:29.568444 systemd[1]: Started cri-containerd-9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d.scope. Jul 10 00:46:29.587142 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali806353b12c3: link becomes ready Jul 10 00:46:29.583375 systemd-networkd[1043]: cali806353b12c3: Link UP Jul 10 00:46:29.583538 systemd-networkd[1043]: cali806353b12c3: Gained carrier Jul 10 00:46:29.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit: BPF prog-id=162 op=LOAD Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4026 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963313337393338663062363366346264353035353235633034363533 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4026 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963313337393338663062363366346264353035353235633034363533 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit: BPF prog-id=163 op=LOAD Jul 10 00:46:29.602000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4026 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963313337393338663062363366346264353035353235633034363533 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit: BPF prog-id=164 op=LOAD Jul 10 00:46:29.602000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4026 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963313337393338663062363366346264353035353235633034363533 Jul 10 00:46:29.602000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:46:29.602000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.602000 audit: BPF prog-id=165 op=LOAD Jul 10 00:46:29.602000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4026 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963313337393338663062363366346264353035353235633034363533 Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.369 [INFO][3978] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.383 [INFO][3978] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--vn467-eth0 goldmane-768f4c5c69- calico-system 30f21bda-1ba3-4bcb-b2d9-c0d594954ccd 1040 0 2025-07-10 00:46:09 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-vn467 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali806353b12c3 [] [] }} ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.383 [INFO][3978] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.432 [INFO][4002] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" HandleID="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.432 [INFO][4002] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" HandleID="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3600), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-vn467", "timestamp":"2025-07-10 00:46:29.432224863 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.432 [INFO][4002] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.464 [INFO][4002] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.464 [INFO][4002] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.512 [INFO][4002] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.521 [INFO][4002] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.540 [INFO][4002] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.543 [INFO][4002] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.546 [INFO][4002] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.546 [INFO][4002] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.550 [INFO][4002] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.562 [INFO][4002] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.570 [INFO][4002] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.570 [INFO][4002] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" host="localhost" Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.570 [INFO][4002] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:29.605055 env[1218]: 2025-07-10 00:46:29.570 [INFO][4002] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" HandleID="k8s-pod-network.aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.605572 env[1218]: 2025-07-10 00:46:29.575 [INFO][3978] cni-plugin/k8s.go 418: Populated endpoint ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vn467-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-vn467", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali806353b12c3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:29.605572 env[1218]: 2025-07-10 00:46:29.575 [INFO][3978] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.605572 env[1218]: 2025-07-10 00:46:29.575 [INFO][3978] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali806353b12c3 ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.605572 env[1218]: 2025-07-10 00:46:29.587 [INFO][3978] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.605572 env[1218]: 2025-07-10 00:46:29.591 [INFO][3978] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vn467-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df", Pod:"goldmane-768f4c5c69-vn467", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali806353b12c3", MAC:"02:de:44:5e:3b:ae", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:29.605572 env[1218]: 2025-07-10 00:46:29.600 [INFO][3978] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df" Namespace="calico-system" Pod="goldmane-768f4c5c69-vn467" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:29.606440 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:29.626435 env[1218]: time="2025-07-10T00:46:29.626368727Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bfqjd,Uid:0f1b3610-3e8c-4388-b51e-1c24bd09f352,Namespace:kube-system,Attempt:1,} returns sandbox id \"9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d\"" Jul 10 00:46:29.627705 kubelet[1971]: E0710 00:46:29.627435 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:29.632359 env[1218]: time="2025-07-10T00:46:29.632311890Z" level=info msg="CreateContainer within sandbox \"9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:46:29.643974 env[1218]: time="2025-07-10T00:46:29.643852896Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:29.643974 env[1218]: time="2025-07-10T00:46:29.643897256Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:29.643974 env[1218]: time="2025-07-10T00:46:29.643907816Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:29.644718 env[1218]: time="2025-07-10T00:46:29.644592537Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df pid=4074 runtime=io.containerd.runc.v2 Jul 10 00:46:29.647207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3344899699.mount: Deactivated successfully. Jul 10 00:46:29.653649 env[1218]: time="2025-07-10T00:46:29.653584261Z" level=info msg="CreateContainer within sandbox \"9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"72c500a0fe460db0f14957a45980fe96fffb35d704ba527c8ea861ed009d9d7c\"" Jul 10 00:46:29.654226 env[1218]: time="2025-07-10T00:46:29.654165222Z" level=info msg="StartContainer for \"72c500a0fe460db0f14957a45980fe96fffb35d704ba527c8ea861ed009d9d7c\"" Jul 10 00:46:29.662570 systemd[1]: Started cri-containerd-aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df.scope. Jul 10 00:46:29.682332 systemd[1]: Started cri-containerd-72c500a0fe460db0f14957a45980fe96fffb35d704ba527c8ea861ed009d9d7c.scope. Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.687000 audit: BPF prog-id=166 op=LOAD Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4074 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165616334613361643430636561336265336338396631653237613331 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4074 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165616334613361643430636561336265336338396631653237613331 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.688000 audit: BPF prog-id=167 op=LOAD Jul 10 00:46:29.688000 audit[4086]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4074 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165616334613361643430636561336265336338396631653237613331 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.689000 audit: BPF prog-id=168 op=LOAD Jul 10 00:46:29.689000 audit[4086]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4074 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165616334613361643430636561336265336338396631653237613331 Jul 10 00:46:29.690000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:46:29.690000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.690000 audit: BPF prog-id=169 op=LOAD Jul 10 00:46:29.690000 audit[4086]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4074 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165616334613361643430636561336265336338396631653237613331 Jul 10 00:46:29.694672 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit: BPF prog-id=170 op=LOAD Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4026 pid=4105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732633530306130666534363064623066313439353761343539383066 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4026 pid=4105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732633530306130666534363064623066313439353761343539383066 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.712000 audit: BPF prog-id=171 op=LOAD Jul 10 00:46:29.712000 audit[4105]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4026 pid=4105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732633530306130666534363064623066313439353761343539383066 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit: BPF prog-id=172 op=LOAD Jul 10 00:46:29.713000 audit[4105]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4026 pid=4105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732633530306130666534363064623066313439353761343539383066 Jul 10 00:46:29.713000 audit: BPF prog-id=172 op=UNLOAD Jul 10 00:46:29.713000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { perfmon } for pid=4105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit[4105]: AVC avc: denied { bpf } for pid=4105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:29.713000 audit: BPF prog-id=173 op=LOAD Jul 10 00:46:29.713000 audit[4105]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4026 pid=4105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:29.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732633530306130666534363064623066313439353761343539383066 Jul 10 00:46:29.718910 env[1218]: time="2025-07-10T00:46:29.718859976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vn467,Uid:30f21bda-1ba3-4bcb-b2d9-c0d594954ccd,Namespace:calico-system,Attempt:1,} returns sandbox id \"aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df\"" Jul 10 00:46:29.737939 env[1218]: time="2025-07-10T00:46:29.737816626Z" level=info msg="StartContainer for \"72c500a0fe460db0f14957a45980fe96fffb35d704ba527c8ea861ed009d9d7c\" returns successfully" Jul 10 00:46:29.812000 audit[4124]: AVC avc: denied { getattr } for pid=4124 comm="coredns" path="cgroup:[4026532483]" dev="nsfs" ino=4026532483 scontext=system_u:system_r:svirt_lxc_net_t:s0:c129,c824 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:46:29.812000 audit[4124]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400012ec00 a2=4000130578 a3=0 items=0 ppid=4026 pid=4124 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c129,c824 key=(null) Jul 10 00:46:29.812000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:46:29.996988 kubelet[1971]: I0710 00:46:29.996879 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:29.997531 kubelet[1971]: E0710 00:46:29.997490 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:30.027000 audit[4151]: NETFILTER_CFG table=filter:103 family=2 entries=19 op=nft_register_rule pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:30.027000 audit[4151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffcfcb6290 a2=0 a3=1 items=0 ppid=2084 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.027000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:30.038000 audit[4151]: NETFILTER_CFG table=nat:104 family=2 entries=21 op=nft_register_chain pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:30.038000 audit[4151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffcfcb6290 a2=0 a3=1 items=0 ppid=2084 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.038000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:30.110978 systemd-networkd[1043]: cali75d67c3d7c7: Gained IPv6LL Jul 10 00:46:30.196864 env[1218]: time="2025-07-10T00:46:30.195976344Z" level=info msg="StopPodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\"" Jul 10 00:46:30.326847 kubelet[1971]: E0710 00:46:30.325550 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:30.326847 kubelet[1971]: E0710 00:46:30.325889 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:30.339520 kubelet[1971]: I0710 00:46:30.339446 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-bfqjd" podStartSLOduration=34.339428696 podStartE2EDuration="34.339428696s" podCreationTimestamp="2025-07-10 00:45:56 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:46:30.339030616 +0000 UTC m=+40.247281147" watchObservedRunningTime="2025-07-10 00:46:30.339428696 +0000 UTC m=+40.247679187" Jul 10 00:46:30.356000 audit[4222]: NETFILTER_CFG table=filter:105 family=2 entries=18 op=nft_register_rule pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:30.356000 audit[4222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff9f98a00 a2=0 a3=1 items=0 ppid=2084 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:30.363000 audit[4222]: NETFILTER_CFG table=nat:106 family=2 entries=16 op=nft_register_rule pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:30.363000 audit[4222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffff9f98a00 a2=0 a3=1 items=0 ppid=2084 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.363000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.301 [INFO][4180] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.302 [INFO][4180] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" iface="eth0" netns="/var/run/netns/cni-33ff3fe1-9e2b-6582-e1f9-0e82e1d8bba1" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.302 [INFO][4180] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" iface="eth0" netns="/var/run/netns/cni-33ff3fe1-9e2b-6582-e1f9-0e82e1d8bba1" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.302 [INFO][4180] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" iface="eth0" netns="/var/run/netns/cni-33ff3fe1-9e2b-6582-e1f9-0e82e1d8bba1" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.302 [INFO][4180] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.302 [INFO][4180] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.346 [INFO][4212] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.347 [INFO][4212] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.347 [INFO][4212] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.357 [WARNING][4212] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.357 [INFO][4212] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.361 [INFO][4212] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:30.365502 env[1218]: 2025-07-10 00:46:30.363 [INFO][4180] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:30.366102 env[1218]: time="2025-07-10T00:46:30.365646989Z" level=info msg="TearDown network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" successfully" Jul 10 00:46:30.366102 env[1218]: time="2025-07-10T00:46:30.365680149Z" level=info msg="StopPodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" returns successfully" Jul 10 00:46:30.366443 kubelet[1971]: E0710 00:46:30.366407 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:30.370614 env[1218]: time="2025-07-10T00:46:30.370573032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-94kwk,Uid:05bc4ecd-5ddb-447d-aa28-779912945b17,Namespace:kube-system,Attempt:1,}" Jul 10 00:46:30.430766 systemd[1]: run-netns-cni\x2d33ff3fe1\x2d9e2b\x2d6582\x2de1f9\x2d0e82e1d8bba1.mount: Deactivated successfully. Jul 10 00:46:30.517271 env[1218]: time="2025-07-10T00:46:30.517189745Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:30.518804 env[1218]: time="2025-07-10T00:46:30.518757346Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:30.521091 env[1218]: time="2025-07-10T00:46:30.520704947Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:30.523545 env[1218]: time="2025-07-10T00:46:30.523485868Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:30.524034 env[1218]: time="2025-07-10T00:46:30.523996908Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 10 00:46:30.525690 env[1218]: time="2025-07-10T00:46:30.525657109Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:46:30.529623 env[1218]: time="2025-07-10T00:46:30.529569911Z" level=info msg="CreateContainer within sandbox \"1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:46:30.542346 env[1218]: time="2025-07-10T00:46:30.542303158Z" level=info msg="CreateContainer within sandbox \"1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"3984bc386209eb78d27ece795cdfece10498559f02df8ce8a875fa6ab4b938bb\"" Jul 10 00:46:30.543269 env[1218]: time="2025-07-10T00:46:30.543221238Z" level=info msg="StartContainer for \"3984bc386209eb78d27ece795cdfece10498559f02df8ce8a875fa6ab4b938bb\"" Jul 10 00:46:30.562742 systemd-networkd[1043]: cali6cbb3008bbf: Link UP Jul 10 00:46:30.566685 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:46:30.567006 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6cbb3008bbf: link becomes ready Jul 10 00:46:30.566342 systemd-networkd[1043]: cali6cbb3008bbf: Gained carrier Jul 10 00:46:30.578951 systemd[1]: Started cri-containerd-3984bc386209eb78d27ece795cdfece10498559f02df8ce8a875fa6ab4b938bb.scope. Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.457 [INFO][4229] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.471 [INFO][4229] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--94kwk-eth0 coredns-674b8bbfcf- kube-system 05bc4ecd-5ddb-447d-aa28-779912945b17 1064 0 2025-07-10 00:45:56 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-94kwk eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6cbb3008bbf [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.471 [INFO][4229] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.504 [INFO][4240] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" HandleID="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.504 [INFO][4240] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" HandleID="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000584b20), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-94kwk", "timestamp":"2025-07-10 00:46:30.504531139 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.504 [INFO][4240] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.504 [INFO][4240] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.504 [INFO][4240] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.517 [INFO][4240] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.523 [INFO][4240] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.532 [INFO][4240] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.534 [INFO][4240] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.539 [INFO][4240] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.539 [INFO][4240] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.542 [INFO][4240] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0 Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.550 [INFO][4240] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.556 [INFO][4240] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.557 [INFO][4240] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" host="localhost" Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.557 [INFO][4240] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:30.584606 env[1218]: 2025-07-10 00:46:30.557 [INFO][4240] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" HandleID="k8s-pod-network.8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.585298 env[1218]: 2025-07-10 00:46:30.559 [INFO][4229] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--94kwk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"05bc4ecd-5ddb-447d-aa28-779912945b17", ResourceVersion:"1064", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-94kwk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6cbb3008bbf", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:30.585298 env[1218]: 2025-07-10 00:46:30.559 [INFO][4229] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.585298 env[1218]: 2025-07-10 00:46:30.560 [INFO][4229] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6cbb3008bbf ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.585298 env[1218]: 2025-07-10 00:46:30.568 [INFO][4229] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.585298 env[1218]: 2025-07-10 00:46:30.568 [INFO][4229] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--94kwk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"05bc4ecd-5ddb-447d-aa28-779912945b17", ResourceVersion:"1064", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0", Pod:"coredns-674b8bbfcf-94kwk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6cbb3008bbf", MAC:"0a:d3:ab:07:6a:22", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:30.585298 env[1218]: 2025-07-10 00:46:30.581 [INFO][4229] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0" Namespace="kube-system" Pod="coredns-674b8bbfcf-94kwk" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:30.597181 env[1218]: time="2025-07-10T00:46:30.597085665Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:30.597181 env[1218]: time="2025-07-10T00:46:30.597137105Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:30.597181 env[1218]: time="2025-07-10T00:46:30.597148425Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:30.597610 env[1218]: time="2025-07-10T00:46:30.597572985Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0 pid=4286 runtime=io.containerd.runc.v2 Jul 10 00:46:30.612854 systemd[1]: Started cri-containerd-8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0.scope. Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.617000 audit: BPF prog-id=174 op=LOAD Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3854 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339383462633338363230396562373864323765636537393563646665 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3854 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339383462633338363230396562373864323765636537393563646665 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit: BPF prog-id=175 op=LOAD Jul 10 00:46:30.618000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3854 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339383462633338363230396562373864323765636537393563646665 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit: BPF prog-id=176 op=LOAD Jul 10 00:46:30.618000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3854 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339383462633338363230396562373864323765636537393563646665 Jul 10 00:46:30.618000 audit: BPF prog-id=176 op=UNLOAD Jul 10 00:46:30.618000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.618000 audit: BPF prog-id=177 op=LOAD Jul 10 00:46:30.618000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3854 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339383462633338363230396562373864323765636537393563646665 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.651000 audit: BPF prog-id=178 op=LOAD Jul 10 00:46:30.653353 env[1218]: time="2025-07-10T00:46:30.652870293Z" level=info msg="StartContainer for \"3984bc386209eb78d27ece795cdfece10498559f02df8ce8a875fa6ab4b938bb\" returns successfully" Jul 10 00:46:30.653000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.653000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4286 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861316232613665646162333363623563393932363135326336663138 Jul 10 00:46:30.653000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.653000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4286 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861316232613665646162333363623563393932363135326336663138 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.654000 audit: BPF prog-id=179 op=LOAD Jul 10 00:46:30.654000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4286 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861316232613665646162333363623563393932363135326336663138 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit: BPF prog-id=180 op=LOAD Jul 10 00:46:30.655000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4286 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861316232613665646162333363623563393932363135326336663138 Jul 10 00:46:30.655000 audit: BPF prog-id=180 op=UNLOAD Jul 10 00:46:30.655000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.655000 audit: BPF prog-id=181 op=LOAD Jul 10 00:46:30.655000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4286 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861316232613665646162333363623563393932363135326336663138 Jul 10 00:46:30.660329 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:30.681332 env[1218]: time="2025-07-10T00:46:30.681288507Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-94kwk,Uid:05bc4ecd-5ddb-447d-aa28-779912945b17,Namespace:kube-system,Attempt:1,} returns sandbox id \"8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0\"" Jul 10 00:46:30.682849 kubelet[1971]: E0710 00:46:30.682325 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:30.688342 env[1218]: time="2025-07-10T00:46:30.687840990Z" level=info msg="CreateContainer within sandbox \"8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:46:30.699619 env[1218]: time="2025-07-10T00:46:30.699570276Z" level=info msg="CreateContainer within sandbox \"8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c654322d4e79ef035311b23ac0f22011ee5eff6c090ac2c5b8adb31317833e15\"" Jul 10 00:46:30.700426 env[1218]: time="2025-07-10T00:46:30.700362437Z" level=info msg="StartContainer for \"c654322d4e79ef035311b23ac0f22011ee5eff6c090ac2c5b8adb31317833e15\"" Jul 10 00:46:30.719606 systemd[1]: Started cri-containerd-c654322d4e79ef035311b23ac0f22011ee5eff6c090ac2c5b8adb31317833e15.scope. Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.738000 audit: BPF prog-id=182 op=LOAD Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4286 pid=4340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336353433323264346537396566303335333131623233616330663232 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4286 pid=4340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336353433323264346537396566303335333131623233616330663232 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit: BPF prog-id=183 op=LOAD Jul 10 00:46:30.741000 audit[4340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4286 pid=4340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336353433323264346537396566303335333131623233616330663232 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit: BPF prog-id=184 op=LOAD Jul 10 00:46:30.741000 audit[4340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4286 pid=4340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336353433323264346537396566303335333131623233616330663232 Jul 10 00:46:30.741000 audit: BPF prog-id=184 op=UNLOAD Jul 10 00:46:30.741000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { perfmon } for pid=4340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit[4340]: AVC avc: denied { bpf } for pid=4340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:30.741000 audit: BPF prog-id=185 op=LOAD Jul 10 00:46:30.741000 audit[4340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4286 pid=4340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:30.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336353433323264346537396566303335333131623233616330663232 Jul 10 00:46:30.750962 systemd-networkd[1043]: cali806353b12c3: Gained IPv6LL Jul 10 00:46:30.758563 env[1218]: time="2025-07-10T00:46:30.758512586Z" level=info msg="StartContainer for \"c654322d4e79ef035311b23ac0f22011ee5eff6c090ac2c5b8adb31317833e15\" returns successfully" Jul 10 00:46:30.774000 audit[4351]: AVC avc: denied { getattr } for pid=4351 comm="coredns" path="cgroup:[4026532495]" dev="nsfs" ino=4026532495 scontext=system_u:system_r:svirt_lxc_net_t:s0:c30,c192 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:46:30.774000 audit[4351]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056810 a2=400011e578 a3=0 items=0 ppid=4286 pid=4351 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c30,c192 key=(null) Jul 10 00:46:30.774000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:46:31.008645 systemd-networkd[1043]: cali0d5a00985b3: Gained IPv6LL Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit: BPF prog-id=186 op=LOAD Jul 10 00:46:31.078000 audit[4393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd07a51f8 a2=98 a3=ffffd07a51e8 items=0 ppid=4376 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:46:31.078000 audit: BPF prog-id=186 op=UNLOAD Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit: BPF prog-id=187 op=LOAD Jul 10 00:46:31.078000 audit[4393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd07a50a8 a2=74 a3=95 items=0 ppid=4376 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:46:31.078000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { bpf } for pid=4393 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit: BPF prog-id=188 op=LOAD Jul 10 00:46:31.078000 audit[4393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd07a50d8 a2=40 a3=ffffd07a5108 items=0 ppid=4376 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:46:31.078000 audit: BPF prog-id=188 op=UNLOAD Jul 10 00:46:31.078000 audit[4393]: AVC avc: denied { perfmon } for pid=4393 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.078000 audit[4393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd07a51f0 a2=50 a3=0 items=0 ppid=4376 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.080000 audit: BPF prog-id=189 op=LOAD Jul 10 00:46:31.080000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcabdccc8 a2=98 a3=ffffcabdccb8 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.080000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.080000 audit: BPF prog-id=189 op=UNLOAD Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit: BPF prog-id=190 op=LOAD Jul 10 00:46:31.081000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcabdc958 a2=74 a3=95 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.081000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.081000 audit: BPF prog-id=190 op=UNLOAD Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.081000 audit: BPF prog-id=191 op=LOAD Jul 10 00:46:31.081000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcabdc9b8 a2=94 a3=2 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.081000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.081000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit: BPF prog-id=192 op=LOAD Jul 10 00:46:31.168000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcabdc978 a2=40 a3=ffffcabdc9a8 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.168000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.168000 audit: BPF prog-id=192 op=UNLOAD Jul 10 00:46:31.168000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.168000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcabdca90 a2=50 a3=0 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.168000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcabdc9e8 a2=28 a3=ffffcabdcb18 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcabdca18 a2=28 a3=ffffcabdcb48 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcabdc8c8 a2=28 a3=ffffcabdc9f8 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcabdca38 a2=28 a3=ffffcabdcb68 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcabdca18 a2=28 a3=ffffcabdcb48 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcabdca08 a2=28 a3=ffffcabdcb38 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcabdca38 a2=28 a3=ffffcabdcb68 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcabdca18 a2=28 a3=ffffcabdcb48 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcabdca38 a2=28 a3=ffffcabdcb68 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcabdca08 a2=28 a3=ffffcabdcb38 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.177000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.177000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcabdca88 a2=28 a3=ffffcabdcbc8 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcabdc7c0 a2=50 a3=0 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit: BPF prog-id=193 op=LOAD Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcabdc7c8 a2=94 a3=5 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit: BPF prog-id=193 op=UNLOAD Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcabdc8d0 a2=50 a3=0 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcabdca18 a2=4 a3=3 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { confidentiality } for pid=4394 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcabdc9f8 a2=94 a3=6 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { confidentiality } for pid=4394 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcabdc1c8 a2=94 a3=83 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.178000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcabdc1c8 a2=94 a3=83 items=0 ppid=4376 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.178000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit: BPF prog-id=194 op=LOAD Jul 10 00:46:31.194000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdd78f0c8 a2=98 a3=ffffdd78f0b8 items=0 ppid=4376 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.194000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:46:31.194000 audit: BPF prog-id=194 op=UNLOAD Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196507 env[1218]: time="2025-07-10T00:46:31.196468279Z" level=info msg="StopPodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\"" Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.194000 audit: BPF prog-id=195 op=LOAD Jul 10 00:46:31.194000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdd78ef78 a2=74 a3=95 items=0 ppid=4376 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.194000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:46:31.196000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.196000 audit: BPF prog-id=196 op=LOAD Jul 10 00:46:31.196000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdd78efa8 a2=40 a3=ffffdd78efd8 items=0 ppid=4376 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.196000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:46:31.196000 audit: BPF prog-id=196 op=UNLOAD Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.270 [INFO][4409] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.270 [INFO][4409] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" iface="eth0" netns="/var/run/netns/cni-00a56689-190b-f72c-1784-f8cb67e78f5f" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.270 [INFO][4409] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" iface="eth0" netns="/var/run/netns/cni-00a56689-190b-f72c-1784-f8cb67e78f5f" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.271 [INFO][4409] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" iface="eth0" netns="/var/run/netns/cni-00a56689-190b-f72c-1784-f8cb67e78f5f" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.271 [INFO][4409] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.271 [INFO][4409] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.304 [INFO][4428] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.304 [INFO][4428] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.304 [INFO][4428] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.320 [WARNING][4428] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.320 [INFO][4428] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.324 [INFO][4428] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:31.329010 env[1218]: 2025-07-10 00:46:31.326 [INFO][4409] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:31.329878 kubelet[1971]: E0710 00:46:31.329847 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:31.330794 env[1218]: time="2025-07-10T00:46:31.330748262Z" level=info msg="TearDown network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" successfully" Jul 10 00:46:31.330794 env[1218]: time="2025-07-10T00:46:31.330789302Z" level=info msg="StopPodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" returns successfully" Jul 10 00:46:31.331710 env[1218]: time="2025-07-10T00:46:31.331665422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlxl2,Uid:97c6e12f-0612-407a-922b-196d3c8b2bc5,Namespace:calico-system,Attempt:1,}" Jul 10 00:46:31.334171 kubelet[1971]: E0710 00:46:31.334133 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:31.367649 kubelet[1971]: I0710 00:46:31.367558 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-94kwk" podStartSLOduration=35.367539999 podStartE2EDuration="35.367539999s" podCreationTimestamp="2025-07-10 00:45:56 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:46:31.352720112 +0000 UTC m=+41.260970643" watchObservedRunningTime="2025-07-10 00:46:31.367539999 +0000 UTC m=+41.275790490" Jul 10 00:46:31.388000 audit[4450]: NETFILTER_CFG table=filter:107 family=2 entries=15 op=nft_register_rule pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:31.388000 audit[4450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffea49ae70 a2=0 a3=1 items=0 ppid=2084 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.388000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:31.394000 audit[4450]: NETFILTER_CFG table=nat:108 family=2 entries=37 op=nft_register_chain pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:31.394000 audit[4450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffea49ae70 a2=0 a3=1 items=0 ppid=2084 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:31.427354 systemd-networkd[1043]: vxlan.calico: Link UP Jul 10 00:46:31.427363 systemd-networkd[1043]: vxlan.calico: Gained carrier Jul 10 00:46:31.431978 systemd[1]: run-netns-cni\x2d00a56689\x2d190b\x2df72c\x2d1784\x2df8cb67e78f5f.mount: Deactivated successfully. Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.494000 audit: BPF prog-id=197 op=LOAD Jul 10 00:46:31.494000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc033ad18 a2=98 a3=ffffc033ad08 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.494000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit: BPF prog-id=197 op=UNLOAD Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit: BPF prog-id=198 op=LOAD Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc033a9f8 a2=74 a3=95 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit: BPF prog-id=198 op=UNLOAD Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit: BPF prog-id=199 op=LOAD Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc033aa58 a2=94 a3=2 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc033aa88 a2=28 a3=ffffc033abb8 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc033aab8 a2=28 a3=ffffc033abe8 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc033a968 a2=28 a3=ffffc033aa98 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc033aad8 a2=28 a3=ffffc033ac08 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc033aab8 a2=28 a3=ffffc033abe8 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc033aaa8 a2=28 a3=ffffc033abd8 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc033aad8 a2=28 a3=ffffc033ac08 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc033aab8 a2=28 a3=ffffc033abe8 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc033aad8 a2=28 a3=ffffc033ac08 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc033aaa8 a2=28 a3=ffffc033abd8 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc033ab28 a2=28 a3=ffffc033ac68 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.495000 audit: BPF prog-id=200 op=LOAD Jul 10 00:46:31.495000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc033a948 a2=40 a3=ffffc033a978 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.495000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.495000 audit: BPF prog-id=200 op=UNLOAD Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffc033a970 a2=50 a3=0 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.497000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffc033a970 a2=50 a3=0 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.497000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit: BPF prog-id=201 op=LOAD Jul 10 00:46:31.497000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc033a0d8 a2=94 a3=2 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.497000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.497000 audit: BPF prog-id=201 op=UNLOAD Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.497000 audit: BPF prog-id=202 op=LOAD Jul 10 00:46:31.497000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc033a268 a2=94 a3=30 items=0 ppid=4376 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.497000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit: BPF prog-id=203 op=LOAD Jul 10 00:46:31.500000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc7970b8 a2=98 a3=ffffcc7970a8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.500000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.500000 audit: BPF prog-id=204 op=LOAD Jul 10 00:46:31.500000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcc796d48 a2=74 a3=95 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.501000 audit: BPF prog-id=204 op=UNLOAD Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.501000 audit: BPF prog-id=205 op=LOAD Jul 10 00:46:31.501000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcc796da8 a2=94 a3=2 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.501000 audit: BPF prog-id=205 op=UNLOAD Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit: BPF prog-id=206 op=LOAD Jul 10 00:46:31.611000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcc796d68 a2=40 a3=ffffcc796d98 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.611000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.611000 audit: BPF prog-id=206 op=UNLOAD Jul 10 00:46:31.611000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.611000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcc796e80 a2=50 a3=0 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.611000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc796dd8 a2=28 a3=ffffcc796f08 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc796e08 a2=28 a3=ffffcc796f38 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc796cb8 a2=28 a3=ffffcc796de8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc796e28 a2=28 a3=ffffcc796f58 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc796e08 a2=28 a3=ffffcc796f38 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc796df8 a2=28 a3=ffffcc796f28 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc796e28 a2=28 a3=ffffcc796f58 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc796e08 a2=28 a3=ffffcc796f38 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc796e28 a2=28 a3=ffffcc796f58 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcc796df8 a2=28 a3=ffffcc796f28 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcc796e78 a2=28 a3=ffffcc796fb8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcc796bb0 a2=50 a3=0 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit: BPF prog-id=207 op=LOAD Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcc796bb8 a2=94 a3=5 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcc796cc0 a2=50 a3=0 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcc796e08 a2=4 a3=3 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.621000 audit[4475]: AVC avc: denied { confidentiality } for pid=4475 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:46:31.621000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcc796de8 a2=94 a3=6 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.621000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { confidentiality } for pid=4475 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:46:31.622000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcc7965b8 a2=94 a3=83 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.622000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { perfmon } for pid=4475 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { confidentiality } for pid=4475 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:46:31.622000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcc7965b8 a2=94 a3=83 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.622000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.622000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.622000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcc797ff8 a2=10 a3=ffffcc7980e8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.622000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.623000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.623000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcc797eb8 a2=10 a3=ffffcc797fa8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.623000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.623000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.623000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcc797e28 a2=10 a3=ffffcc797fa8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.623000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.623000 audit[4475]: AVC avc: denied { bpf } for pid=4475 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.623000 audit[4475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcc797e28 a2=10 a3=ffffcc797fa8 items=0 ppid=4376 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.623000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:46:31.636000 audit: BPF prog-id=202 op=UNLOAD Jul 10 00:46:31.663675 systemd-networkd[1043]: cali7ebce217621: Link UP Jul 10 00:46:31.664962 systemd-networkd[1043]: cali7ebce217621: Gained carrier Jul 10 00:46:31.665837 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7ebce217621: link becomes ready Jul 10 00:46:31.679248 kubelet[1971]: I0710 00:46:31.679170 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-56698484bf-kt6p7" podStartSLOduration=24.656070265 podStartE2EDuration="26.679151385s" podCreationTimestamp="2025-07-10 00:46:05 +0000 UTC" firstStartedPulling="2025-07-10 00:46:28.501711669 +0000 UTC m=+38.409962200" lastFinishedPulling="2025-07-10 00:46:30.524792789 +0000 UTC m=+40.433043320" observedRunningTime="2025-07-10 00:46:31.383827407 +0000 UTC m=+41.292077938" watchObservedRunningTime="2025-07-10 00:46:31.679151385 +0000 UTC m=+41.587401916" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.477 [INFO][4437] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--qlxl2-eth0 csi-node-driver- calico-system 97c6e12f-0612-407a-922b-196d3c8b2bc5 1099 0 2025-07-10 00:46:10 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-qlxl2 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali7ebce217621 [] [] }} ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.477 [INFO][4437] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.571 [INFO][4466] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" HandleID="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.571 [INFO][4466] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" HandleID="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000255600), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-qlxl2", "timestamp":"2025-07-10 00:46:31.570968734 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.571 [INFO][4466] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.571 [INFO][4466] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.571 [INFO][4466] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.583 [INFO][4466] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.591 [INFO][4466] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.597 [INFO][4466] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.598 [INFO][4466] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.602 [INFO][4466] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.602 [INFO][4466] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.604 [INFO][4466] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8 Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.640 [INFO][4466] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.651 [INFO][4466] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.652 [INFO][4466] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" host="localhost" Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.652 [INFO][4466] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:31.685722 env[1218]: 2025-07-10 00:46:31.652 [INFO][4466] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" HandleID="k8s-pod-network.8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.686538 env[1218]: 2025-07-10 00:46:31.656 [INFO][4437] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlxl2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97c6e12f-0612-407a-922b-196d3c8b2bc5", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-qlxl2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ebce217621", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:31.686538 env[1218]: 2025-07-10 00:46:31.656 [INFO][4437] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.686538 env[1218]: 2025-07-10 00:46:31.656 [INFO][4437] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7ebce217621 ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.686538 env[1218]: 2025-07-10 00:46:31.667 [INFO][4437] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.686538 env[1218]: 2025-07-10 00:46:31.668 [INFO][4437] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlxl2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97c6e12f-0612-407a-922b-196d3c8b2bc5", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8", Pod:"csi-node-driver-qlxl2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ebce217621", MAC:"02:3f:ea:2e:99:59", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:31.686538 env[1218]: 2025-07-10 00:46:31.680 [INFO][4437] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8" Namespace="calico-system" Pod="csi-node-driver-qlxl2" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:31.729509 env[1218]: time="2025-07-10T00:46:31.729418409Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:31.729764 env[1218]: time="2025-07-10T00:46:31.729727529Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:31.729994 env[1218]: time="2025-07-10T00:46:31.729946049Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:31.730394 env[1218]: time="2025-07-10T00:46:31.730310249Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8 pid=4512 runtime=io.containerd.runc.v2 Jul 10 00:46:31.757089 systemd[1]: Started cri-containerd-8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8.scope. Jul 10 00:46:31.775978 systemd-networkd[1043]: cali6cbb3008bbf: Gained IPv6LL Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.777000 audit: BPF prog-id=208 op=LOAD Jul 10 00:46:31.778000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.778000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4512 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866613362396336313762636164366137303162363239616663653532 Jul 10 00:46:31.778000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.778000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4512 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866613362396336313762636164366137303162363239616663653532 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.779000 audit: BPF prog-id=209 op=LOAD Jul 10 00:46:31.779000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4512 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866613362396336313762636164366137303162363239616663653532 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.783000 audit: BPF prog-id=210 op=LOAD Jul 10 00:46:31.783000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4512 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866613362396336313762636164366137303162363239616663653532 Jul 10 00:46:31.785000 audit: BPF prog-id=210 op=UNLOAD Jul 10 00:46:31.785000 audit: BPF prog-id=209 op=UNLOAD Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:31.785000 audit: BPF prog-id=211 op=LOAD Jul 10 00:46:31.785000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4512 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866613362396336313762636164366137303162363239616663653532 Jul 10 00:46:31.790338 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:31.816000 audit[4552]: NETFILTER_CFG table=nat:109 family=2 entries=15 op=nft_register_chain pid=4552 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:31.816000 audit[4552]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffcc130a00 a2=0 a3=ffffa56eefa8 items=0 ppid=4376 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.816000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:31.816000 audit[4551]: NETFILTER_CFG table=raw:110 family=2 entries=21 op=nft_register_chain pid=4551 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:31.816000 audit[4551]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffd7812700 a2=0 a3=ffff8c480fa8 items=0 ppid=4376 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.816000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:31.818000 audit[4557]: NETFILTER_CFG table=mangle:111 family=2 entries=16 op=nft_register_chain pid=4557 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:31.818000 audit[4557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc48ed4e0 a2=0 a3=ffffb0bf1fa8 items=0 ppid=4376 pid=4557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.818000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:31.820885 env[1218]: time="2025-07-10T00:46:31.820789492Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlxl2,Uid:97c6e12f-0612-407a-922b-196d3c8b2bc5,Namespace:calico-system,Attempt:1,} returns sandbox id \"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8\"" Jul 10 00:46:31.819000 audit[4553]: NETFILTER_CFG table=filter:112 family=2 entries=236 op=nft_register_chain pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:31.819000 audit[4553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=138276 a0=3 a1=ffffcbbf6590 a2=0 a3=ffff89c7afa8 items=0 ppid=4376 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.819000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:31.861000 audit[4571]: NETFILTER_CFG table=filter:113 family=2 entries=54 op=nft_register_chain pid=4571 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:31.861000 audit[4571]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25976 a0=3 a1=fffff2e09e80 a2=0 a3=ffffa0305fa8 items=0 ppid=4376 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:31.861000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:32.198521 env[1218]: time="2025-07-10T00:46:32.198423383Z" level=info msg="StopPodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\"" Jul 10 00:46:32.199316 env[1218]: time="2025-07-10T00:46:32.199281583Z" level=info msg="StopPodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\"" Jul 10 00:46:32.258992 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2247929695.mount: Deactivated successfully. Jul 10 00:46:32.338035 kubelet[1971]: E0710 00:46:32.337963 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:32.338475 kubelet[1971]: E0710 00:46:32.338358 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:32.338545 kubelet[1971]: I0710 00:46:32.338492 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.301 [INFO][4590] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.302 [INFO][4590] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" iface="eth0" netns="/var/run/netns/cni-03248624-785e-8969-b049-dba465fdc948" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.302 [INFO][4590] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" iface="eth0" netns="/var/run/netns/cni-03248624-785e-8969-b049-dba465fdc948" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.302 [INFO][4590] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" iface="eth0" netns="/var/run/netns/cni-03248624-785e-8969-b049-dba465fdc948" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.302 [INFO][4590] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.302 [INFO][4590] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.351 [INFO][4611] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.351 [INFO][4611] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.351 [INFO][4611] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.362 [WARNING][4611] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.363 [INFO][4611] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.365 [INFO][4611] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:32.374089 env[1218]: 2025-07-10 00:46:32.371 [INFO][4590] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:32.374736 env[1218]: time="2025-07-10T00:46:32.374700260Z" level=info msg="TearDown network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" successfully" Jul 10 00:46:32.374846 env[1218]: time="2025-07-10T00:46:32.374800460Z" level=info msg="StopPodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" returns successfully" Jul 10 00:46:32.375843 env[1218]: time="2025-07-10T00:46:32.375619061Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f67db6b86-l28z9,Uid:213935fc-36c6-4ee5-b2cd-1c20e5fa7b38,Namespace:calico-system,Attempt:1,}" Jul 10 00:46:32.430861 kernel: kauditd_printk_skb: 1075 callbacks suppressed Jul 10 00:46:32.430994 kernel: audit: type=1325 audit(1752108392.419:1376): table=filter:114 family=2 entries=12 op=nft_register_rule pid=4643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:32.431022 kernel: audit: type=1300 audit(1752108392.419:1376): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff4db7490 a2=0 a3=1 items=0 ppid=2084 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.419000 audit[4643]: NETFILTER_CFG table=filter:114 family=2 entries=12 op=nft_register_rule pid=4643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:32.419000 audit[4643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff4db7490 a2=0 a3=1 items=0 ppid=2084 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.333 [INFO][4601] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.333 [INFO][4601] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" iface="eth0" netns="/var/run/netns/cni-a5643de6-b05f-98cb-dd7c-e3bd2bd4576e" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.333 [INFO][4601] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" iface="eth0" netns="/var/run/netns/cni-a5643de6-b05f-98cb-dd7c-e3bd2bd4576e" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.333 [INFO][4601] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" iface="eth0" netns="/var/run/netns/cni-a5643de6-b05f-98cb-dd7c-e3bd2bd4576e" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.333 [INFO][4601] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.333 [INFO][4601] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.391 [INFO][4619] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.391 [INFO][4619] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.391 [INFO][4619] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.404 [WARNING][4619] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.405 [INFO][4619] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.406 [INFO][4619] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:32.431308 env[1218]: 2025-07-10 00:46:32.412 [INFO][4601] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:32.431308 env[1218]: time="2025-07-10T00:46:32.423173762Z" level=info msg="TearDown network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" successfully" Jul 10 00:46:32.431308 env[1218]: time="2025-07-10T00:46:32.423218282Z" level=info msg="StopPodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" returns successfully" Jul 10 00:46:32.431308 env[1218]: time="2025-07-10T00:46:32.423906922Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-l77g6,Uid:f3a3de79-f413-407b-88e4-bc07b12da4ed,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:46:32.431136 systemd[1]: run-netns-cni\x2da5643de6\x2db05f\x2d98cb\x2ddd7c\x2de3bd2bd4576e.mount: Deactivated successfully. Jul 10 00:46:32.431218 systemd[1]: run-netns-cni\x2d03248624\x2d785e\x2d8969\x2db049\x2ddba465fdc948.mount: Deactivated successfully. Jul 10 00:46:32.419000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:32.434536 kernel: audit: type=1327 audit(1752108392.419:1376): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:32.447000 audit[4643]: NETFILTER_CFG table=nat:115 family=2 entries=58 op=nft_register_chain pid=4643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:32.447000 audit[4643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffff4db7490 a2=0 a3=1 items=0 ppid=2084 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.455753 kernel: audit: type=1325 audit(1752108392.447:1377): table=nat:115 family=2 entries=58 op=nft_register_chain pid=4643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:32.456027 kernel: audit: type=1300 audit(1752108392.447:1377): arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffff4db7490 a2=0 a3=1 items=0 ppid=2084 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.456062 kernel: audit: type=1327 audit(1752108392.447:1377): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:32.447000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:32.591430 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:46:32.591539 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calica33e44a032: link becomes ready Jul 10 00:46:32.589866 systemd-networkd[1043]: calica33e44a032: Link UP Jul 10 00:46:32.590051 systemd-networkd[1043]: calica33e44a032: Gained carrier Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.449 [INFO][4628] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0 calico-kube-controllers-6f67db6b86- calico-system 213935fc-36c6-4ee5-b2cd-1c20e5fa7b38 1127 0 2025-07-10 00:46:10 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6f67db6b86 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6f67db6b86-l28z9 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calica33e44a032 [] [] }} ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.450 [INFO][4628] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.524 [INFO][4661] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" HandleID="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.524 [INFO][4661] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" HandleID="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004ce00), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6f67db6b86-l28z9", "timestamp":"2025-07-10 00:46:32.524181446 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.525 [INFO][4661] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.525 [INFO][4661] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.525 [INFO][4661] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.539 [INFO][4661] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.551 [INFO][4661] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.559 [INFO][4661] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.563 [INFO][4661] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.566 [INFO][4661] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.566 [INFO][4661] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.569 [INFO][4661] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0 Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.576 [INFO][4661] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.583 [INFO][4661] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.583 [INFO][4661] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" host="localhost" Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.583 [INFO][4661] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:32.613324 env[1218]: 2025-07-10 00:46:32.583 [INFO][4661] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" HandleID="k8s-pod-network.84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.613938 env[1218]: 2025-07-10 00:46:32.585 [INFO][4628] cni-plugin/k8s.go 418: Populated endpoint ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0", GenerateName:"calico-kube-controllers-6f67db6b86-", Namespace:"calico-system", SelfLink:"", UID:"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38", ResourceVersion:"1127", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f67db6b86", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6f67db6b86-l28z9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calica33e44a032", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:32.613938 env[1218]: 2025-07-10 00:46:32.585 [INFO][4628] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.613938 env[1218]: 2025-07-10 00:46:32.585 [INFO][4628] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calica33e44a032 ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.613938 env[1218]: 2025-07-10 00:46:32.589 [INFO][4628] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.613938 env[1218]: 2025-07-10 00:46:32.594 [INFO][4628] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0", GenerateName:"calico-kube-controllers-6f67db6b86-", Namespace:"calico-system", SelfLink:"", UID:"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38", ResourceVersion:"1127", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f67db6b86", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0", Pod:"calico-kube-controllers-6f67db6b86-l28z9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calica33e44a032", MAC:"92:4b:d0:5d:9a:83", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:32.613938 env[1218]: 2025-07-10 00:46:32.607 [INFO][4628] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0" Namespace="calico-system" Pod="calico-kube-controllers-6f67db6b86-l28z9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:32.627000 audit[4689]: NETFILTER_CFG table=filter:116 family=2 entries=48 op=nft_register_chain pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:32.627000 audit[4689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23108 a0=3 a1=ffffc811c3b0 a2=0 a3=ffff7f6fefa8 items=0 ppid=4376 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.635843 kernel: audit: type=1325 audit(1752108392.627:1378): table=filter:116 family=2 entries=48 op=nft_register_chain pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:32.635946 kernel: audit: type=1300 audit(1752108392.627:1378): arch=c00000b7 syscall=211 success=yes exit=23108 a0=3 a1=ffffc811c3b0 a2=0 a3=ffff7f6fefa8 items=0 ppid=4376 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.635970 kernel: audit: type=1327 audit(1752108392.627:1378): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:32.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:32.647336 env[1218]: time="2025-07-10T00:46:32.647202100Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:32.647336 env[1218]: time="2025-07-10T00:46:32.647254940Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:32.647336 env[1218]: time="2025-07-10T00:46:32.647266220Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:32.647744 env[1218]: time="2025-07-10T00:46:32.647586620Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0 pid=4696 runtime=io.containerd.runc.v2 Jul 10 00:46:32.669389 systemd[1]: Started cri-containerd-84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0.scope. Jul 10 00:46:32.699629 systemd-networkd[1043]: calidf7fc5ac83d: Link UP Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.701894 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidf7fc5ac83d: link becomes ready Jul 10 00:46:32.701936 kernel: audit: type=1400 audit(1752108392.699:1379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.702951 systemd-networkd[1043]: calidf7fc5ac83d: Gained carrier Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.700000 audit: BPF prog-id=212 op=LOAD Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4696 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666535663833663931383431313135306462333862313737353230 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4696 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666535663833663931383431313135306462333862313737353230 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit: BPF prog-id=213 op=LOAD Jul 10 00:46:32.707000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4696 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666535663833663931383431313135306462333862313737353230 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit: BPF prog-id=214 op=LOAD Jul 10 00:46:32.707000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4696 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666535663833663931383431313135306462333862313737353230 Jul 10 00:46:32.707000 audit: BPF prog-id=214 op=UNLOAD Jul 10 00:46:32.707000 audit: BPF prog-id=213 op=UNLOAD Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.707000 audit: BPF prog-id=215 op=LOAD Jul 10 00:46:32.707000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4696 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666535663833663931383431313135306462333862313737353230 Jul 10 00:46:32.709171 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.504 [INFO][4645] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0 calico-apiserver-56698484bf- calico-apiserver f3a3de79-f413-407b-88e4-bc07b12da4ed 1128 0 2025-07-10 00:46:05 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:56698484bf projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-56698484bf-l77g6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidf7fc5ac83d [] [] }} ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.504 [INFO][4645] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.568 [INFO][4669] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" HandleID="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.568 [INFO][4669] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" HandleID="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001afb70), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-56698484bf-l77g6", "timestamp":"2025-07-10 00:46:32.568603546 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.569 [INFO][4669] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.583 [INFO][4669] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.583 [INFO][4669] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.639 [INFO][4669] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.652 [INFO][4669] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.657 [INFO][4669] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.660 [INFO][4669] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.663 [INFO][4669] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.663 [INFO][4669] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.665 [INFO][4669] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.677 [INFO][4669] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.689 [INFO][4669] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.689 [INFO][4669] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" host="localhost" Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.689 [INFO][4669] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:32.724179 env[1218]: 2025-07-10 00:46:32.689 [INFO][4669] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" HandleID="k8s-pod-network.bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.724976 env[1218]: 2025-07-10 00:46:32.696 [INFO][4645] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3a3de79-f413-407b-88e4-bc07b12da4ed", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-56698484bf-l77g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf7fc5ac83d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:32.724976 env[1218]: 2025-07-10 00:46:32.696 [INFO][4645] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.724976 env[1218]: 2025-07-10 00:46:32.696 [INFO][4645] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidf7fc5ac83d ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.724976 env[1218]: 2025-07-10 00:46:32.699 [INFO][4645] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.724976 env[1218]: 2025-07-10 00:46:32.700 [INFO][4645] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3a3de79-f413-407b-88e4-bc07b12da4ed", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d", Pod:"calico-apiserver-56698484bf-l77g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf7fc5ac83d", MAC:"76:ce:b4:2d:4a:64", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:32.724976 env[1218]: 2025-07-10 00:46:32.721 [INFO][4645] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d" Namespace="calico-apiserver" Pod="calico-apiserver-56698484bf-l77g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:32.739000 audit[4735]: NETFILTER_CFG table=filter:117 family=2 entries=53 op=nft_register_chain pid=4735 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:46:32.739000 audit[4735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26608 a0=3 a1=ffffc753c530 a2=0 a3=ffff8075cfa8 items=0 ppid=4376 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.739000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:46:32.748671 env[1218]: time="2025-07-10T00:46:32.748598705Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:46:32.748804 env[1218]: time="2025-07-10T00:46:32.748681265Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:46:32.748804 env[1218]: time="2025-07-10T00:46:32.748713985Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:46:32.748944 env[1218]: time="2025-07-10T00:46:32.748908665Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d pid=4749 runtime=io.containerd.runc.v2 Jul 10 00:46:32.750474 env[1218]: time="2025-07-10T00:46:32.750435706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f67db6b86-l28z9,Uid:213935fc-36c6-4ee5-b2cd-1c20e5fa7b38,Namespace:calico-system,Attempt:1,} returns sandbox id \"84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0\"" Jul 10 00:46:32.771199 systemd[1]: Started cri-containerd-bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d.scope. Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.796000 audit: BPF prog-id=216 op=LOAD Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4749 pid=4760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262613763373761623639636663653430613437653562323939386538 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4749 pid=4760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262613763373761623639636663653430613437653562323939386538 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.797000 audit: BPF prog-id=217 op=LOAD Jul 10 00:46:32.797000 audit[4760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4749 pid=4760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262613763373761623639636663653430613437653562323939386538 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.798000 audit: BPF prog-id=218 op=LOAD Jul 10 00:46:32.798000 audit[4760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4749 pid=4760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262613763373761623639636663653430613437653562323939386538 Jul 10 00:46:32.799000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:46:32.799000 audit: BPF prog-id=217 op=UNLOAD Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { perfmon } for pid=4760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit[4760]: AVC avc: denied { bpf } for pid=4760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.799000 audit: BPF prog-id=219 op=LOAD Jul 10 00:46:32.799000 audit[4760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4749 pid=4760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262613763373761623639636663653430613437653562323939386538 Jul 10 00:46:32.801678 systemd-resolved[1156]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:46:32.819727 env[1218]: time="2025-07-10T00:46:32.819686096Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56698484bf-l77g6,Uid:f3a3de79-f413-407b-88e4-bc07b12da4ed,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d\"" Jul 10 00:46:32.824377 env[1218]: time="2025-07-10T00:46:32.824334618Z" level=info msg="CreateContainer within sandbox \"bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:46:32.835084 env[1218]: time="2025-07-10T00:46:32.835025983Z" level=info msg="CreateContainer within sandbox \"bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"38a0622160f3518464435a414097c4a8dfc83632e5b8dd1a3dce1801806b51e5\"" Jul 10 00:46:32.835639 env[1218]: time="2025-07-10T00:46:32.835603343Z" level=info msg="StartContainer for \"38a0622160f3518464435a414097c4a8dfc83632e5b8dd1a3dce1801806b51e5\"" Jul 10 00:46:32.852637 systemd[1]: Started cri-containerd-38a0622160f3518464435a414097c4a8dfc83632e5b8dd1a3dce1801806b51e5.scope. Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.870000 audit: BPF prog-id=220 op=LOAD Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4749 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613036323231363066333531383436343433356134313430393763 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4749 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613036323231363066333531383436343433356134313430393763 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit: BPF prog-id=221 op=LOAD Jul 10 00:46:32.871000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4749 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613036323231363066333531383436343433356134313430393763 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit: BPF prog-id=222 op=LOAD Jul 10 00:46:32.871000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4749 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613036323231363066333531383436343433356134313430393763 Jul 10 00:46:32.871000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:46:32.871000 audit: BPF prog-id=221 op=UNLOAD Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:32.871000 audit: BPF prog-id=223 op=LOAD Jul 10 00:46:32.871000 audit[4791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4749 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:32.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613036323231363066333531383436343433356134313430393763 Jul 10 00:46:32.891422 env[1218]: time="2025-07-10T00:46:32.891375648Z" level=info msg="StartContainer for \"38a0622160f3518464435a414097c4a8dfc83632e5b8dd1a3dce1801806b51e5\" returns successfully" Jul 10 00:46:32.938925 systemd[1]: Started sshd@8-10.0.0.129:22-10.0.0.1:51306.service. Jul 10 00:46:32.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.129:22-10.0.0.1:51306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.977000 audit[4267]: AVC avc: denied { watch } for pid=4267 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_46_16.2028377173/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c355 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c355 tclass=file permissive=0 Jul 10 00:46:32.977000 audit[4267]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400026c500 a2=fc6 a3=0 items=0 ppid=3854 pid=4267 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c355 key=(null) Jul 10 00:46:32.977000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:46:33.008000 audit[4820]: USER_ACCT pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:33.009694 sshd[4820]: Accepted publickey for core from 10.0.0.1 port 51306 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:33.009000 audit[4820]: CRED_ACQ pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:33.010000 audit[4820]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeddd3bd0 a2=3 a3=1 items=0 ppid=1 pid=4820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.010000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:33.011405 sshd[4820]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:33.015191 systemd-logind[1206]: New session 9 of user core. Jul 10 00:46:33.019710 systemd[1]: Started session-9.scope. Jul 10 00:46:33.024000 audit[4820]: USER_START pid=4820 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:33.025000 audit[4827]: CRED_ACQ pid=4827 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:33.027267 env[1218]: time="2025-07-10T00:46:33.027220827Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:33.028520 env[1218]: time="2025-07-10T00:46:33.028482227Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:33.030087 env[1218]: time="2025-07-10T00:46:33.030059468Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:33.031738 env[1218]: time="2025-07-10T00:46:33.031700508Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:33.032407 env[1218]: time="2025-07-10T00:46:33.032370589Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 10 00:46:33.034526 env[1218]: time="2025-07-10T00:46:33.034466750Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:46:33.039199 env[1218]: time="2025-07-10T00:46:33.039157071Z" level=info msg="CreateContainer within sandbox \"aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:46:33.052291 env[1218]: time="2025-07-10T00:46:33.052199237Z" level=info msg="CreateContainer within sandbox \"aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"d895428aedc17d929de35cabaf25c86ed76007abb5fedd29c86a5ef10c6665f2\"" Jul 10 00:46:33.052929 env[1218]: time="2025-07-10T00:46:33.052901437Z" level=info msg="StartContainer for \"d895428aedc17d929de35cabaf25c86ed76007abb5fedd29c86a5ef10c6665f2\"" Jul 10 00:46:33.073605 systemd[1]: Started cri-containerd-d895428aedc17d929de35cabaf25c86ed76007abb5fedd29c86a5ef10c6665f2.scope. Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit: BPF prog-id=224 op=LOAD Jul 10 00:46:33.101000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.101000 audit[4836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4074 pid=4836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438393534323861656463313764393239646533356361626166323563 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4074 pid=4836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438393534323861656463313764393239646533356361626166323563 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit: BPF prog-id=225 op=LOAD Jul 10 00:46:33.102000 audit[4836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4074 pid=4836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438393534323861656463313764393239646533356361626166323563 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit: BPF prog-id=226 op=LOAD Jul 10 00:46:33.102000 audit[4836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4074 pid=4836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438393534323861656463313764393239646533356361626166323563 Jul 10 00:46:33.102000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:46:33.102000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { perfmon } for pid=4836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit[4836]: AVC avc: denied { bpf } for pid=4836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:33.102000 audit: BPF prog-id=227 op=LOAD Jul 10 00:46:33.102000 audit[4836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4074 pid=4836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438393534323861656463313764393239646533356361626166323563 Jul 10 00:46:33.119944 systemd-networkd[1043]: cali7ebce217621: Gained IPv6LL Jul 10 00:46:33.133760 env[1218]: time="2025-07-10T00:46:33.133703990Z" level=info msg="StartContainer for \"d895428aedc17d929de35cabaf25c86ed76007abb5fedd29c86a5ef10c6665f2\" returns successfully" Jul 10 00:46:33.345981 kubelet[1971]: E0710 00:46:33.345950 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:33.353577 sshd[4820]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:33.356838 kubelet[1971]: I0710 00:46:33.356742 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-vn467" podStartSLOduration=21.04308699 podStartE2EDuration="24.356725282s" podCreationTimestamp="2025-07-10 00:46:09 +0000 UTC" firstStartedPulling="2025-07-10 00:46:29.720142057 +0000 UTC m=+39.628392548" lastFinishedPulling="2025-07-10 00:46:33.033780309 +0000 UTC m=+42.942030840" observedRunningTime="2025-07-10 00:46:33.356672882 +0000 UTC m=+43.264923413" watchObservedRunningTime="2025-07-10 00:46:33.356725282 +0000 UTC m=+43.264975813" Jul 10 00:46:33.358000 audit[4820]: USER_END pid=4820 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:33.358000 audit[4820]: CRED_DISP pid=4820 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:33.364419 systemd[1]: sshd@8-10.0.0.129:22-10.0.0.1:51306.service: Deactivated successfully. Jul 10 00:46:33.365280 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:46:33.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.129:22-10.0.0.1:51306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:33.365801 systemd-logind[1206]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:46:33.366636 systemd-logind[1206]: Removed session 9. Jul 10 00:46:33.371000 audit[4878]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4878 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:33.371000 audit[4878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffebaf7c40 a2=0 a3=1 items=0 ppid=2084 pid=4878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.371000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:33.377000 audit[4878]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=4878 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:33.377000 audit[4878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffebaf7c40 a2=0 a3=1 items=0 ppid=2084 pid=4878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.377000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:33.439907 systemd-networkd[1043]: vxlan.calico: Gained IPv6LL Jul 10 00:46:33.982000 audit[4802]: AVC avc: denied { watch } for pid=4802 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_46_16.2825149824/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c942,c1018 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c942,c1018 tclass=file permissive=0 Jul 10 00:46:33.982000 audit[4802]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40004a73e0 a2=fc6 a3=0 items=0 ppid=4749 pid=4802 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c942,c1018 key=(null) Jul 10 00:46:33.982000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:46:34.026613 env[1218]: time="2025-07-10T00:46:34.026551758Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:34.028004 env[1218]: time="2025-07-10T00:46:34.027967078Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:34.029458 env[1218]: time="2025-07-10T00:46:34.029368759Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:34.030687 env[1218]: time="2025-07-10T00:46:34.030638079Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:34.031109 env[1218]: time="2025-07-10T00:46:34.031076800Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 10 00:46:34.032543 env[1218]: time="2025-07-10T00:46:34.032337560Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:46:34.036656 env[1218]: time="2025-07-10T00:46:34.036617042Z" level=info msg="CreateContainer within sandbox \"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:46:34.049212 env[1218]: time="2025-07-10T00:46:34.049151767Z" level=info msg="CreateContainer within sandbox \"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"6429023753e54d9f422e4a98a22e49969a5e02d6963eaece64ac998a697d669b\"" Jul 10 00:46:34.049710 env[1218]: time="2025-07-10T00:46:34.049683607Z" level=info msg="StartContainer for \"6429023753e54d9f422e4a98a22e49969a5e02d6963eaece64ac998a697d669b\"" Jul 10 00:46:34.081116 systemd-networkd[1043]: calica33e44a032: Gained IPv6LL Jul 10 00:46:34.085270 systemd[1]: Started cri-containerd-6429023753e54d9f422e4a98a22e49969a5e02d6963eaece64ac998a697d669b.scope. Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4512 pid=4888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:34.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634323930323337353365353464396634323265346139386132326534 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.112000 audit: BPF prog-id=228 op=LOAD Jul 10 00:46:34.112000 audit[4888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4512 pid=4888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:34.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634323930323337353365353464396634323265346139386132326534 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit: BPF prog-id=229 op=LOAD Jul 10 00:46:34.113000 audit[4888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4512 pid=4888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:34.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634323930323337353365353464396634323265346139386132326534 Jul 10 00:46:34.113000 audit: BPF prog-id=229 op=UNLOAD Jul 10 00:46:34.113000 audit: BPF prog-id=228 op=UNLOAD Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { perfmon } for pid=4888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit[4888]: AVC avc: denied { bpf } for pid=4888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:34.113000 audit: BPF prog-id=230 op=LOAD Jul 10 00:46:34.113000 audit[4888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4512 pid=4888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:34.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634323930323337353365353464396634323265346139386132326534 Jul 10 00:46:34.142500 env[1218]: time="2025-07-10T00:46:34.142441203Z" level=info msg="StartContainer for \"6429023753e54d9f422e4a98a22e49969a5e02d6963eaece64ac998a697d669b\" returns successfully" Jul 10 00:46:34.349293 kubelet[1971]: I0710 00:46:34.349250 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:34.349293 kubelet[1971]: I0710 00:46:34.349250 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:34.397000 audit[4916]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:34.397000 audit[4916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff7c88470 a2=0 a3=1 items=0 ppid=2084 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:34.397000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:34.404000 audit[4916]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:34.404000 audit[4916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff7c88470 a2=0 a3=1 items=0 ppid=2084 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:34.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:34.590956 systemd-networkd[1043]: calidf7fc5ac83d: Gained IPv6LL Jul 10 00:46:35.999675 env[1218]: time="2025-07-10T00:46:35.999620216Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:36.001253 env[1218]: time="2025-07-10T00:46:36.001171817Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:36.003774 env[1218]: time="2025-07-10T00:46:36.003721018Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:36.011587 env[1218]: time="2025-07-10T00:46:36.011534500Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:36.011844 env[1218]: time="2025-07-10T00:46:36.011794460Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 10 00:46:36.013962 env[1218]: time="2025-07-10T00:46:36.013914981Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:46:36.029011 env[1218]: time="2025-07-10T00:46:36.028950626Z" level=info msg="CreateContainer within sandbox \"84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:46:36.043864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4261866987.mount: Deactivated successfully. Jul 10 00:46:36.044314 env[1218]: time="2025-07-10T00:46:36.044270751Z" level=info msg="CreateContainer within sandbox \"84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b8609f16b837726037e42becb4f39e5397973172435eb3a817433b4b33d3ff6d\"" Jul 10 00:46:36.048255 env[1218]: time="2025-07-10T00:46:36.048202793Z" level=info msg="StartContainer for \"b8609f16b837726037e42becb4f39e5397973172435eb3a817433b4b33d3ff6d\"" Jul 10 00:46:36.071517 systemd[1]: Started cri-containerd-b8609f16b837726037e42becb4f39e5397973172435eb3a817433b4b33d3ff6d.scope. Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit: BPF prog-id=231 op=LOAD Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4696 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:36.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363039663136623833373732363033376534326265636234663339 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4696 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:36.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363039663136623833373732363033376534326265636234663339 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit: BPF prog-id=232 op=LOAD Jul 10 00:46:36.097000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4696 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:36.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363039663136623833373732363033376534326265636234663339 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.097000 audit: BPF prog-id=233 op=LOAD Jul 10 00:46:36.097000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4696 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:36.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363039663136623833373732363033376534326265636234663339 Jul 10 00:46:36.098000 audit: BPF prog-id=233 op=UNLOAD Jul 10 00:46:36.098000 audit: BPF prog-id=232 op=UNLOAD Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:36.098000 audit: BPF prog-id=234 op=LOAD Jul 10 00:46:36.098000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4696 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:36.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238363039663136623833373732363033376534326265636234663339 Jul 10 00:46:36.118993 env[1218]: time="2025-07-10T00:46:36.118933657Z" level=info msg="StartContainer for \"b8609f16b837726037e42becb4f39e5397973172435eb3a817433b4b33d3ff6d\" returns successfully" Jul 10 00:46:36.368965 kubelet[1971]: I0710 00:46:36.368257 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-56698484bf-l77g6" podStartSLOduration=31.368242621 podStartE2EDuration="31.368242621s" podCreationTimestamp="2025-07-10 00:46:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:46:33.369961728 +0000 UTC m=+43.278212259" watchObservedRunningTime="2025-07-10 00:46:36.368242621 +0000 UTC m=+46.276493152" Jul 10 00:46:36.368965 kubelet[1971]: I0710 00:46:36.368499 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6f67db6b86-l28z9" podStartSLOduration=23.107591786 podStartE2EDuration="26.368478701s" podCreationTimestamp="2025-07-10 00:46:10 +0000 UTC" firstStartedPulling="2025-07-10 00:46:32.752146426 +0000 UTC m=+42.660396957" lastFinishedPulling="2025-07-10 00:46:36.013033261 +0000 UTC m=+45.921283872" observedRunningTime="2025-07-10 00:46:36.368064221 +0000 UTC m=+46.276314712" watchObservedRunningTime="2025-07-10 00:46:36.368478701 +0000 UTC m=+46.276729232" Jul 10 00:46:37.125241 env[1218]: time="2025-07-10T00:46:37.125180836Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:37.126872 env[1218]: time="2025-07-10T00:46:37.126800596Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:37.128519 env[1218]: time="2025-07-10T00:46:37.128471917Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:37.130061 env[1218]: time="2025-07-10T00:46:37.130029637Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:37.130543 env[1218]: time="2025-07-10T00:46:37.130509558Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 10 00:46:37.135744 env[1218]: time="2025-07-10T00:46:37.135701479Z" level=info msg="CreateContainer within sandbox \"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:46:37.150233 env[1218]: time="2025-07-10T00:46:37.150174244Z" level=info msg="CreateContainer within sandbox \"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"d75f64228f98afdc228c3bc432e5f24982df3bf3ac9da17673b2ef4ca833810a\"" Jul 10 00:46:37.151028 env[1218]: time="2025-07-10T00:46:37.150999964Z" level=info msg="StartContainer for \"d75f64228f98afdc228c3bc432e5f24982df3bf3ac9da17673b2ef4ca833810a\"" Jul 10 00:46:37.180341 systemd[1]: Started cri-containerd-d75f64228f98afdc228c3bc432e5f24982df3bf3ac9da17673b2ef4ca833810a.scope. Jul 10 00:46:37.198000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.198000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4512 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:37.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437356636343232386639386166646332323863336263343332653566 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.199000 audit: BPF prog-id=235 op=LOAD Jul 10 00:46:37.199000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4512 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:37.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437356636343232386639386166646332323863336263343332653566 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.200000 audit: BPF prog-id=236 op=LOAD Jul 10 00:46:37.200000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4512 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:37.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437356636343232386639386166646332323863336263343332653566 Jul 10 00:46:37.200000 audit: BPF prog-id=236 op=UNLOAD Jul 10 00:46:37.201000 audit: BPF prog-id=235 op=UNLOAD Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { perfmon } for pid=5002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit[5002]: AVC avc: denied { bpf } for pid=5002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:46:37.201000 audit: BPF prog-id=237 op=LOAD Jul 10 00:46:37.201000 audit[5002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4512 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:37.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437356636343232386639386166646332323863336263343332653566 Jul 10 00:46:37.222613 env[1218]: time="2025-07-10T00:46:37.222527467Z" level=info msg="StartContainer for \"d75f64228f98afdc228c3bc432e5f24982df3bf3ac9da17673b2ef4ca833810a\" returns successfully" Jul 10 00:46:38.020567 systemd[1]: run-containerd-runc-k8s.io-d75f64228f98afdc228c3bc432e5f24982df3bf3ac9da17673b2ef4ca833810a-runc.0lWk4U.mount: Deactivated successfully. Jul 10 00:46:38.250905 kubelet[1971]: I0710 00:46:38.250860 1971 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:46:38.250905 kubelet[1971]: I0710 00:46:38.250909 1971 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:46:38.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.129:22-10.0.0.1:51308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.358486 systemd[1]: Started sshd@9-10.0.0.129:22-10.0.0.1:51308.service. Jul 10 00:46:38.359467 kernel: kauditd_printk_skb: 402 callbacks suppressed Jul 10 00:46:38.359542 kernel: audit: type=1130 audit(1752108398.357:1497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.129:22-10.0.0.1:51308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.400000 audit[5036]: USER_ACCT pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.401467 sshd[5036]: Accepted publickey for core from 10.0.0.1 port 51308 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:38.403000 audit[5036]: CRED_ACQ pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.407629 kernel: audit: type=1101 audit(1752108398.400:1498): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.407681 kernel: audit: type=1103 audit(1752108398.403:1499): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.407704 kernel: audit: type=1006 audit(1752108398.403:1500): pid=5036 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 10 00:46:38.407972 sshd[5036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:38.403000 audit[5036]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcf4d630 a2=3 a3=1 items=0 ppid=1 pid=5036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:38.412481 systemd-logind[1206]: New session 10 of user core. Jul 10 00:46:38.413228 kernel: audit: type=1300 audit(1752108398.403:1500): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcf4d630 a2=3 a3=1 items=0 ppid=1 pid=5036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:38.413267 kernel: audit: type=1327 audit(1752108398.403:1500): proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:38.403000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:38.413418 systemd[1]: Started session-10.scope. Jul 10 00:46:38.416000 audit[5036]: USER_START pid=5036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.417000 audit[5038]: CRED_ACQ pid=5038 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.423352 kernel: audit: type=1105 audit(1752108398.416:1501): pid=5036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.423424 kernel: audit: type=1103 audit(1752108398.417:1502): pid=5038 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.601919 sshd[5036]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:38.602000 audit[5036]: USER_END pid=5036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.606235 systemd[1]: Started sshd@10-10.0.0.129:22-10.0.0.1:51320.service. Jul 10 00:46:38.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.129:22-10.0.0.1:51320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.608533 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:46:38.609189 systemd-logind[1206]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:46:38.609341 systemd[1]: sshd@9-10.0.0.129:22-10.0.0.1:51308.service: Deactivated successfully. Jul 10 00:46:38.610056 kernel: audit: type=1106 audit(1752108398.602:1503): pid=5036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.610116 kernel: audit: type=1130 audit(1752108398.605:1504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.129:22-10.0.0.1:51320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.606000 audit[5036]: CRED_DISP pid=5036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.129:22-10.0.0.1:51308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.610599 systemd-logind[1206]: Removed session 10. Jul 10 00:46:38.642000 audit[5050]: USER_ACCT pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.643611 sshd[5050]: Accepted publickey for core from 10.0.0.1 port 51320 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:38.643000 audit[5050]: CRED_ACQ pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.644000 audit[5050]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb698360 a2=3 a3=1 items=0 ppid=1 pid=5050 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:38.644000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:38.645366 sshd[5050]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:38.649032 systemd-logind[1206]: New session 11 of user core. Jul 10 00:46:38.649931 systemd[1]: Started session-11.scope. Jul 10 00:46:38.655000 audit[5050]: USER_START pid=5050 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.656000 audit[5053]: CRED_ACQ pid=5053 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.825300 sshd[5050]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:38.828000 audit[5050]: USER_END pid=5050 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.828000 audit[5050]: CRED_DISP pid=5050 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.829708 systemd[1]: Started sshd@11-10.0.0.129:22-10.0.0.1:51328.service. Jul 10 00:46:38.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.129:22-10.0.0.1:51328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.833525 systemd[1]: sshd@10-10.0.0.129:22-10.0.0.1:51320.service: Deactivated successfully. Jul 10 00:46:38.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.129:22-10.0.0.1:51320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:38.834413 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:46:38.835169 systemd-logind[1206]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:46:38.838578 systemd-logind[1206]: Removed session 11. Jul 10 00:46:38.873000 audit[5062]: USER_ACCT pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.874518 sshd[5062]: Accepted publickey for core from 10.0.0.1 port 51328 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:38.874000 audit[5062]: CRED_ACQ pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.875000 audit[5062]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffceb27480 a2=3 a3=1 items=0 ppid=1 pid=5062 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:38.875000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:38.876574 sshd[5062]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:38.881406 systemd[1]: Started session-12.scope. Jul 10 00:46:38.881695 systemd-logind[1206]: New session 12 of user core. Jul 10 00:46:38.891000 audit[5062]: USER_START pid=5062 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:38.892000 audit[5065]: CRED_ACQ pid=5065 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:39.018534 sshd[5062]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:39.018000 audit[5062]: USER_END pid=5062 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:39.018000 audit[5062]: CRED_DISP pid=5062 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:39.020988 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:46:39.021617 systemd-logind[1206]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:46:39.021770 systemd[1]: sshd@11-10.0.0.129:22-10.0.0.1:51328.service: Deactivated successfully. Jul 10 00:46:39.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.129:22-10.0.0.1:51328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.022948 systemd-logind[1206]: Removed session 12. Jul 10 00:46:44.024011 systemd[1]: Started sshd@12-10.0.0.129:22-10.0.0.1:38532.service. Jul 10 00:46:44.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.129:22-10.0.0.1:38532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:44.025164 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 10 00:46:44.025273 kernel: audit: type=1130 audit(1752108404.023:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.129:22-10.0.0.1:38532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:44.065000 audit[5110]: USER_ACCT pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.066039 sshd[5110]: Accepted publickey for core from 10.0.0.1 port 38532 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:44.066000 audit[5110]: CRED_ACQ pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.069673 sshd[5110]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:44.072372 kernel: audit: type=1101 audit(1752108404.065:1525): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.072451 kernel: audit: type=1103 audit(1752108404.066:1526): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.074431 kernel: audit: type=1006 audit(1752108404.066:1527): pid=5110 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 10 00:46:44.066000 audit[5110]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfd2d530 a2=3 a3=1 items=0 ppid=1 pid=5110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:44.077774 kernel: audit: type=1300 audit(1752108404.066:1527): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfd2d530 a2=3 a3=1 items=0 ppid=1 pid=5110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:44.066000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:44.079148 kernel: audit: type=1327 audit(1752108404.066:1527): proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:44.081791 systemd[1]: Started session-13.scope. Jul 10 00:46:44.082134 systemd-logind[1206]: New session 13 of user core. Jul 10 00:46:44.086000 audit[5110]: USER_START pid=5110 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.087000 audit[5118]: CRED_ACQ pid=5118 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.093458 kernel: audit: type=1105 audit(1752108404.086:1528): pid=5110 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.093583 kernel: audit: type=1103 audit(1752108404.087:1529): pid=5118 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.236006 sshd[5110]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:44.236000 audit[5110]: USER_END pid=5110 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.238669 systemd[1]: sshd@12-10.0.0.129:22-10.0.0.1:38532.service: Deactivated successfully. Jul 10 00:46:44.239454 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:46:44.236000 audit[5110]: CRED_DISP pid=5110 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.243627 kernel: audit: type=1106 audit(1752108404.236:1530): pid=5110 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.243689 kernel: audit: type=1104 audit(1752108404.236:1531): pid=5110 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:44.243640 systemd-logind[1206]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:46:44.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.129:22-10.0.0.1:38532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:44.244369 systemd-logind[1206]: Removed session 13. Jul 10 00:46:45.987805 kubelet[1971]: I0710 00:46:45.987756 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:46.008035 systemd[1]: run-containerd-runc-k8s.io-d895428aedc17d929de35cabaf25c86ed76007abb5fedd29c86a5ef10c6665f2-runc.Ni9OhI.mount: Deactivated successfully. Jul 10 00:46:46.069233 kubelet[1971]: I0710 00:46:46.069163 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-qlxl2" podStartSLOduration=30.761135588 podStartE2EDuration="36.069139693s" podCreationTimestamp="2025-07-10 00:46:10 +0000 UTC" firstStartedPulling="2025-07-10 00:46:31.823774653 +0000 UTC m=+41.732025184" lastFinishedPulling="2025-07-10 00:46:37.131778758 +0000 UTC m=+47.040029289" observedRunningTime="2025-07-10 00:46:37.370583914 +0000 UTC m=+47.278834485" watchObservedRunningTime="2025-07-10 00:46:46.069139693 +0000 UTC m=+55.977390224" Jul 10 00:46:46.099000 audit[5166]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:46.099000 audit[5166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff5a382e0 a2=0 a3=1 items=0 ppid=2084 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:46.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:46.108000 audit[5166]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:46.108000 audit[5166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff5a382e0 a2=0 a3=1 items=0 ppid=2084 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:46.108000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:46.664083 kubelet[1971]: I0710 00:46:46.664032 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:46:46.716000 audit[5173]: NETFILTER_CFG table=filter:124 family=2 entries=9 op=nft_register_rule pid=5173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:46.716000 audit[5173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd0e65ee0 a2=0 a3=1 items=0 ppid=2084 pid=5173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:46.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:46.723000 audit[5173]: NETFILTER_CFG table=nat:125 family=2 entries=31 op=nft_register_chain pid=5173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:46.723000 audit[5173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd0e65ee0 a2=0 a3=1 items=0 ppid=2084 pid=5173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:46.723000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:47.481000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.481000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40015b8780 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:46:47.481000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:46:47.481000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.481000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001ea3d60 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:46:47.481000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:46:47.724000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.724000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.724000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=400797e600 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:46:47.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:46:47.724000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=85 a1=4005261cc0 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:46:47.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:46:47.725000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6722 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.725000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=86 a1=40074d1590 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:46:47.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:46:47.725000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.725000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=85 a1=400797e750 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:46:47.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:46:47.727000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.727000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=4005261f60 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:46:47.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:46:47.727000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:47.727000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=85 a1=4007c87350 a2=fc6 a3=0 items=0 ppid=1691 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c423 key=(null) Jul 10 00:46:47.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:46:49.242880 systemd[1]: Started sshd@13-10.0.0.129:22-10.0.0.1:38544.service. Jul 10 00:46:49.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.129:22-10.0.0.1:38544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:49.244318 kernel: kauditd_printk_skb: 37 callbacks suppressed Jul 10 00:46:49.244398 kernel: audit: type=1130 audit(1752108409.242:1545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.129:22-10.0.0.1:38544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:49.286000 audit[5175]: USER_ACCT pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.287669 sshd[5175]: Accepted publickey for core from 10.0.0.1 port 38544 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:49.287000 audit[5175]: CRED_ACQ pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.291043 sshd[5175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:49.294088 kernel: audit: type=1101 audit(1752108409.286:1546): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.294167 kernel: audit: type=1103 audit(1752108409.287:1547): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.296204 kernel: audit: type=1006 audit(1752108409.287:1548): pid=5175 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 00:46:49.287000 audit[5175]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff90767b0 a2=3 a3=1 items=0 ppid=1 pid=5175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:49.298429 systemd-logind[1206]: New session 14 of user core. Jul 10 00:46:49.298883 systemd[1]: Started session-14.scope. Jul 10 00:46:49.299705 kernel: audit: type=1300 audit(1752108409.287:1548): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff90767b0 a2=3 a3=1 items=0 ppid=1 pid=5175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:49.287000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:49.301020 kernel: audit: type=1327 audit(1752108409.287:1548): proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:49.302000 audit[5175]: USER_START pid=5175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.303000 audit[5177]: CRED_ACQ pid=5177 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.309791 kernel: audit: type=1105 audit(1752108409.302:1549): pid=5175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.310434 kernel: audit: type=1103 audit(1752108409.303:1550): pid=5177 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.449192 sshd[5175]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:49.449000 audit[5175]: USER_END pid=5175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.452451 systemd[1]: Started sshd@14-10.0.0.129:22-10.0.0.1:38546.service. Jul 10 00:46:49.449000 audit[5175]: CRED_DISP pid=5175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.457133 kernel: audit: type=1106 audit(1752108409.449:1551): pid=5175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.457211 kernel: audit: type=1104 audit(1752108409.449:1552): pid=5175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.129:22-10.0.0.1:38546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:49.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.129:22-10.0.0.1:38544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:49.459266 systemd-logind[1206]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:46:49.459425 systemd[1]: sshd@13-10.0.0.129:22-10.0.0.1:38544.service: Deactivated successfully. Jul 10 00:46:49.460455 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:46:49.461203 systemd-logind[1206]: Removed session 14. Jul 10 00:46:49.489000 audit[5187]: USER_ACCT pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.490747 sshd[5187]: Accepted publickey for core from 10.0.0.1 port 38546 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:49.491000 audit[5187]: CRED_ACQ pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.491000 audit[5187]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcae6f00 a2=3 a3=1 items=0 ppid=1 pid=5187 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:49.491000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:49.492303 sshd[5187]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:49.497662 systemd-logind[1206]: New session 15 of user core. Jul 10 00:46:49.500284 systemd[1]: Started session-15.scope. Jul 10 00:46:49.503000 audit[5187]: USER_START pid=5187 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.504000 audit[5190]: CRED_ACQ pid=5190 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.723748 sshd[5187]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:49.723000 audit[5187]: USER_END pid=5187 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.724000 audit[5187]: CRED_DISP pid=5187 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.727306 systemd[1]: Started sshd@15-10.0.0.129:22-10.0.0.1:38556.service. Jul 10 00:46:49.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.129:22-10.0.0.1:38556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:49.728375 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:46:49.729053 systemd[1]: sshd@14-10.0.0.129:22-10.0.0.1:38546.service: Deactivated successfully. Jul 10 00:46:49.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.129:22-10.0.0.1:38546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:49.729948 systemd-logind[1206]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:46:49.730613 systemd-logind[1206]: Removed session 15. Jul 10 00:46:49.766000 audit[5198]: USER_ACCT pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.767117 sshd[5198]: Accepted publickey for core from 10.0.0.1 port 38556 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:49.767000 audit[5198]: CRED_ACQ pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.767000 audit[5198]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca1cfa80 a2=3 a3=1 items=0 ppid=1 pid=5198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:49.767000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:49.769011 sshd[5198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:49.772500 systemd-logind[1206]: New session 16 of user core. Jul 10 00:46:49.773475 systemd[1]: Started session-16.scope. Jul 10 00:46:49.776000 audit[5198]: USER_START pid=5198 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:49.778000 audit[5201]: CRED_ACQ pid=5201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.167598 env[1218]: time="2025-07-10T00:46:50.167543912Z" level=info msg="StopPodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\"" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.213 [WARNING][5220] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0f1b3610-3e8c-4388-b51e-1c24bd09f352", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d", Pod:"coredns-674b8bbfcf-bfqjd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d5a00985b3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.214 [INFO][5220] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.214 [INFO][5220] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" iface="eth0" netns="" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.214 [INFO][5220] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.214 [INFO][5220] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.256 [INFO][5231] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.256 [INFO][5231] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.257 [INFO][5231] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.269 [WARNING][5231] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.269 [INFO][5231] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.271 [INFO][5231] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.276023 env[1218]: 2025-07-10 00:46:50.273 [INFO][5220] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.276023 env[1218]: time="2025-07-10T00:46:50.275967487Z" level=info msg="TearDown network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" successfully" Jul 10 00:46:50.276023 env[1218]: time="2025-07-10T00:46:50.276049887Z" level=info msg="StopPodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" returns successfully" Jul 10 00:46:50.277092 env[1218]: time="2025-07-10T00:46:50.276651807Z" level=info msg="RemovePodSandbox for \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\"" Jul 10 00:46:50.277092 env[1218]: time="2025-07-10T00:46:50.276684927Z" level=info msg="Forcibly stopping sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\"" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.319 [WARNING][5250] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0f1b3610-3e8c-4388-b51e-1c24bd09f352", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c137938f0b63f4bd505525c0465316dc8bb325aa09e76999776ebebe08b995d", Pod:"coredns-674b8bbfcf-bfqjd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d5a00985b3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.319 [INFO][5250] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.319 [INFO][5250] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" iface="eth0" netns="" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.319 [INFO][5250] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.319 [INFO][5250] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.337 [INFO][5259] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.337 [INFO][5259] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.337 [INFO][5259] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.360 [WARNING][5259] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.360 [INFO][5259] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" HandleID="k8s-pod-network.aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Workload="localhost-k8s-coredns--674b8bbfcf--bfqjd-eth0" Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.362 [INFO][5259] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.371070 env[1218]: 2025-07-10 00:46:50.369 [INFO][5250] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86" Jul 10 00:46:50.371505 env[1218]: time="2025-07-10T00:46:50.371100220Z" level=info msg="TearDown network for sandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" successfully" Jul 10 00:46:50.380473 env[1218]: time="2025-07-10T00:46:50.380406382Z" level=info msg="RemovePodSandbox \"aa6af7990d36727298f69bfd343d0d9706cade85db258b78969f2e0deea5eb86\" returns successfully" Jul 10 00:46:50.380876 env[1218]: time="2025-07-10T00:46:50.380842662Z" level=info msg="StopPodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\"" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.433 [WARNING][5279] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vn467-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd", ResourceVersion:"1250", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df", Pod:"goldmane-768f4c5c69-vn467", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali806353b12c3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.433 [INFO][5279] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.433 [INFO][5279] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" iface="eth0" netns="" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.433 [INFO][5279] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.433 [INFO][5279] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.457 [INFO][5288] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.457 [INFO][5288] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.457 [INFO][5288] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.468 [WARNING][5288] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.468 [INFO][5288] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.469 [INFO][5288] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.474445 env[1218]: 2025-07-10 00:46:50.471 [INFO][5279] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.474969 env[1218]: time="2025-07-10T00:46:50.474935115Z" level=info msg="TearDown network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" successfully" Jul 10 00:46:50.475034 env[1218]: time="2025-07-10T00:46:50.475018475Z" level=info msg="StopPodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" returns successfully" Jul 10 00:46:50.476429 env[1218]: time="2025-07-10T00:46:50.475543315Z" level=info msg="RemovePodSandbox for \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\"" Jul 10 00:46:50.476429 env[1218]: time="2025-07-10T00:46:50.475578515Z" level=info msg="Forcibly stopping sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\"" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.512 [WARNING][5305] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vn467-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"30f21bda-1ba3-4bcb-b2d9-c0d594954ccd", ResourceVersion:"1250", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aeac4a3ad40cea3be3c89f1e27a310ce63a959c86219ac570743273e6ac2e7df", Pod:"goldmane-768f4c5c69-vn467", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali806353b12c3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.512 [INFO][5305] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.512 [INFO][5305] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" iface="eth0" netns="" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.512 [INFO][5305] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.512 [INFO][5305] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.533 [INFO][5314] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.533 [INFO][5314] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.533 [INFO][5314] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.544 [WARNING][5314] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.544 [INFO][5314] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" HandleID="k8s-pod-network.76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Workload="localhost-k8s-goldmane--768f4c5c69--vn467-eth0" Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.546 [INFO][5314] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.550121 env[1218]: 2025-07-10 00:46:50.548 [INFO][5305] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635" Jul 10 00:46:50.550900 env[1218]: time="2025-07-10T00:46:50.550864365Z" level=info msg="TearDown network for sandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" successfully" Jul 10 00:46:50.556196 env[1218]: time="2025-07-10T00:46:50.556160766Z" level=info msg="RemovePodSandbox \"76108d3f30e033976447d1a120ee8f81f83ca11b3ef87e4e3bc205c0a80c1635\" returns successfully" Jul 10 00:46:50.558489 env[1218]: time="2025-07-10T00:46:50.558433766Z" level=info msg="StopPodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\"" Jul 10 00:46:50.576000 audit[5339]: NETFILTER_CFG table=filter:126 family=2 entries=20 op=nft_register_rule pid=5339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:50.576000 audit[5339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd6758430 a2=0 a3=1 items=0 ppid=2084 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:50.576000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:50.583583 sshd[5198]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:50.582000 audit[5339]: NETFILTER_CFG table=nat:127 family=2 entries=26 op=nft_register_rule pid=5339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:50.582000 audit[5339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffd6758430 a2=0 a3=1 items=0 ppid=2084 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:50.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:50.584000 audit[5198]: USER_END pid=5198 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.584000 audit[5198]: CRED_DISP pid=5198 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.587725 systemd[1]: Started sshd@16-10.0.0.129:22-10.0.0.1:38570.service. Jul 10 00:46:50.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.129:22-10.0.0.1:38570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:50.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.129:22-10.0.0.1:38556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:50.588420 systemd[1]: sshd@15-10.0.0.129:22-10.0.0.1:38556.service: Deactivated successfully. Jul 10 00:46:50.589264 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:46:50.590728 systemd-logind[1206]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:46:50.593647 systemd-logind[1206]: Removed session 16. Jul 10 00:46:50.607000 audit[5348]: NETFILTER_CFG table=filter:128 family=2 entries=32 op=nft_register_rule pid=5348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:50.607000 audit[5348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe179cc40 a2=0 a3=1 items=0 ppid=2084 pid=5348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:50.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:50.617000 audit[5348]: NETFILTER_CFG table=nat:129 family=2 entries=26 op=nft_register_rule pid=5348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:50.617000 audit[5348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffe179cc40 a2=0 a3=1 items=0 ppid=2084 pid=5348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:50.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:50.627000 audit[5343]: USER_ACCT pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.628244 sshd[5343]: Accepted publickey for core from 10.0.0.1 port 38570 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:50.630000 audit[5343]: CRED_ACQ pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.630000 audit[5343]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffe92e50 a2=3 a3=1 items=0 ppid=1 pid=5343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:50.630000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:50.631452 sshd[5343]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:50.635314 systemd-logind[1206]: New session 17 of user core. Jul 10 00:46:50.635796 systemd[1]: Started session-17.scope. Jul 10 00:46:50.641000 audit[5343]: USER_START pid=5343 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.642000 audit[5356]: CRED_ACQ pid=5356 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.611 [WARNING][5334] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3a3de79-f413-407b-88e4-bc07b12da4ed", ResourceVersion:"1150", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d", Pod:"calico-apiserver-56698484bf-l77g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf7fc5ac83d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.616 [INFO][5334] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.616 [INFO][5334] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" iface="eth0" netns="" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.616 [INFO][5334] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.616 [INFO][5334] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.644 [INFO][5350] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.644 [INFO][5350] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.644 [INFO][5350] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.652 [WARNING][5350] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.653 [INFO][5350] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.654 [INFO][5350] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.657407 env[1218]: 2025-07-10 00:46:50.655 [INFO][5334] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.658019 env[1218]: time="2025-07-10T00:46:50.657444980Z" level=info msg="TearDown network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" successfully" Jul 10 00:46:50.658019 env[1218]: time="2025-07-10T00:46:50.657475780Z" level=info msg="StopPodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" returns successfully" Jul 10 00:46:50.658019 env[1218]: time="2025-07-10T00:46:50.657980140Z" level=info msg="RemovePodSandbox for \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\"" Jul 10 00:46:50.658092 env[1218]: time="2025-07-10T00:46:50.658013340Z" level=info msg="Forcibly stopping sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\"" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.689 [WARNING][5368] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3a3de79-f413-407b-88e4-bc07b12da4ed", ResourceVersion:"1150", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bba7c77ab69cfce40a47e5b2998e8c34104c39920cf0506eb362592c2c0e955d", Pod:"calico-apiserver-56698484bf-l77g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf7fc5ac83d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.690 [INFO][5368] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.690 [INFO][5368] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" iface="eth0" netns="" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.690 [INFO][5368] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.690 [INFO][5368] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.710 [INFO][5378] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.710 [INFO][5378] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.710 [INFO][5378] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.720 [WARNING][5378] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.720 [INFO][5378] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" HandleID="k8s-pod-network.001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Workload="localhost-k8s-calico--apiserver--56698484bf--l77g6-eth0" Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.721 [INFO][5378] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.724912 env[1218]: 2025-07-10 00:46:50.723 [INFO][5368] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718" Jul 10 00:46:50.726762 env[1218]: time="2025-07-10T00:46:50.724876029Z" level=info msg="TearDown network for sandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" successfully" Jul 10 00:46:50.732574 env[1218]: time="2025-07-10T00:46:50.732495950Z" level=info msg="RemovePodSandbox \"001793f64d9758ad02fbc88b955db4368d343611fcc2158aabed0e99d23bb718\" returns successfully" Jul 10 00:46:50.733102 env[1218]: time="2025-07-10T00:46:50.733069230Z" level=info msg="StopPodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\"" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.765 [WARNING][5401] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" WorkloadEndpoint="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.765 [INFO][5401] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.765 [INFO][5401] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" iface="eth0" netns="" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.765 [INFO][5401] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.765 [INFO][5401] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.784 [INFO][5410] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.785 [INFO][5410] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.785 [INFO][5410] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.796 [WARNING][5410] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.797 [INFO][5410] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.798 [INFO][5410] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.801837 env[1218]: 2025-07-10 00:46:50.800 [INFO][5401] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.802624 env[1218]: time="2025-07-10T00:46:50.801869840Z" level=info msg="TearDown network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" successfully" Jul 10 00:46:50.802624 env[1218]: time="2025-07-10T00:46:50.801907360Z" level=info msg="StopPodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" returns successfully" Jul 10 00:46:50.802624 env[1218]: time="2025-07-10T00:46:50.802415280Z" level=info msg="RemovePodSandbox for \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\"" Jul 10 00:46:50.802624 env[1218]: time="2025-07-10T00:46:50.802448080Z" level=info msg="Forcibly stopping sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\"" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.836 [WARNING][5428] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" WorkloadEndpoint="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.836 [INFO][5428] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.836 [INFO][5428] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" iface="eth0" netns="" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.836 [INFO][5428] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.836 [INFO][5428] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.858 [INFO][5436] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.858 [INFO][5436] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.858 [INFO][5436] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.866 [WARNING][5436] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.866 [INFO][5436] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" HandleID="k8s-pod-network.5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Workload="localhost-k8s-whisker--786d95bbc--n2wj7-eth0" Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.867 [INFO][5436] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.872919 env[1218]: 2025-07-10 00:46:50.869 [INFO][5428] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1" Jul 10 00:46:50.872919 env[1218]: time="2025-07-10T00:46:50.871990809Z" level=info msg="TearDown network for sandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" successfully" Jul 10 00:46:50.881366 env[1218]: time="2025-07-10T00:46:50.881207010Z" level=info msg="RemovePodSandbox \"5536fcfa8acc4af3c5ebcb5bda1a6a5c66936a61c779234d7f9369fc44c978e1\" returns successfully" Jul 10 00:46:50.881818 env[1218]: time="2025-07-10T00:46:50.881784331Z" level=info msg="StopPodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\"" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.922 [WARNING][5453] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--94kwk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"05bc4ecd-5ddb-447d-aa28-779912945b17", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0", Pod:"coredns-674b8bbfcf-94kwk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6cbb3008bbf", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.922 [INFO][5453] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.922 [INFO][5453] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" iface="eth0" netns="" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.922 [INFO][5453] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.922 [INFO][5453] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.945 [INFO][5462] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.946 [INFO][5462] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.946 [INFO][5462] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.955 [WARNING][5462] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.955 [INFO][5462] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.957 [INFO][5462] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:50.960216 env[1218]: 2025-07-10 00:46:50.958 [INFO][5453] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:50.960664 env[1218]: time="2025-07-10T00:46:50.960240621Z" level=info msg="TearDown network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" successfully" Jul 10 00:46:50.960664 env[1218]: time="2025-07-10T00:46:50.960269941Z" level=info msg="StopPodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" returns successfully" Jul 10 00:46:50.961169 env[1218]: time="2025-07-10T00:46:50.961107621Z" level=info msg="RemovePodSandbox for \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\"" Jul 10 00:46:50.961236 env[1218]: time="2025-07-10T00:46:50.961172901Z" level=info msg="Forcibly stopping sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\"" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.006 [WARNING][5480] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--94kwk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"05bc4ecd-5ddb-447d-aa28-779912945b17", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a1b2a6edab33cb5c9926152c6f18ae6f040eae42135116ae2afdddef61d10f0", Pod:"coredns-674b8bbfcf-94kwk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6cbb3008bbf", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.007 [INFO][5480] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.007 [INFO][5480] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" iface="eth0" netns="" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.007 [INFO][5480] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.007 [INFO][5480] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.029 [INFO][5489] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.030 [INFO][5489] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.030 [INFO][5489] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.039 [WARNING][5489] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.039 [INFO][5489] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" HandleID="k8s-pod-network.117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Workload="localhost-k8s-coredns--674b8bbfcf--94kwk-eth0" Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.041 [INFO][5489] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.047268 env[1218]: 2025-07-10 00:46:51.045 [INFO][5480] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b" Jul 10 00:46:51.048623 env[1218]: time="2025-07-10T00:46:51.048572953Z" level=info msg="TearDown network for sandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" successfully" Jul 10 00:46:51.051682 env[1218]: time="2025-07-10T00:46:51.051640633Z" level=info msg="RemovePodSandbox \"117674ad7932af261001098ae2c9e34ddbb02b4225050d3fa12ed5d870bdcb2b\" returns successfully" Jul 10 00:46:51.052190 env[1218]: time="2025-07-10T00:46:51.052146954Z" level=info msg="StopPodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\"" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.092 [WARNING][5507] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0", GenerateName:"calico-kube-controllers-6f67db6b86-", Namespace:"calico-system", SelfLink:"", UID:"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38", ResourceVersion:"1179", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f67db6b86", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0", Pod:"calico-kube-controllers-6f67db6b86-l28z9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calica33e44a032", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.092 [INFO][5507] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.092 [INFO][5507] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" iface="eth0" netns="" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.092 [INFO][5507] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.092 [INFO][5507] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.113 [INFO][5516] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.114 [INFO][5516] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.114 [INFO][5516] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.126 [WARNING][5516] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.126 [INFO][5516] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.127 [INFO][5516] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.131610 env[1218]: 2025-07-10 00:46:51.130 [INFO][5507] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.132201 env[1218]: time="2025-07-10T00:46:51.131643844Z" level=info msg="TearDown network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" successfully" Jul 10 00:46:51.132201 env[1218]: time="2025-07-10T00:46:51.131675844Z" level=info msg="StopPodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" returns successfully" Jul 10 00:46:51.132201 env[1218]: time="2025-07-10T00:46:51.132177284Z" level=info msg="RemovePodSandbox for \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\"" Jul 10 00:46:51.132272 env[1218]: time="2025-07-10T00:46:51.132209484Z" level=info msg="Forcibly stopping sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\"" Jul 10 00:46:51.166174 sshd[5343]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:51.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.129:22-10.0.0.1:38586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:51.167397 systemd[1]: Started sshd@17-10.0.0.129:22-10.0.0.1:38586.service. Jul 10 00:46:51.171000 audit[5343]: USER_END pid=5343 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.171000 audit[5343]: CRED_DISP pid=5343 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.173887 systemd[1]: sshd@16-10.0.0.129:22-10.0.0.1:38570.service: Deactivated successfully. Jul 10 00:46:51.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.129:22-10.0.0.1:38570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:51.174677 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:46:51.176912 systemd-logind[1206]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:46:51.177660 systemd-logind[1206]: Removed session 17. Jul 10 00:46:51.210000 audit[5543]: USER_ACCT pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.211703 sshd[5543]: Accepted publickey for core from 10.0.0.1 port 38586 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:51.211000 audit[5543]: CRED_ACQ pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.212000 audit[5543]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef68ea40 a2=3 a3=1 items=0 ppid=1 pid=5543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:51.212000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:51.214327 sshd[5543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:51.219236 systemd[1]: Started session-18.scope. Jul 10 00:46:51.219592 systemd-logind[1206]: New session 18 of user core. Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.185 [WARNING][5534] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0", GenerateName:"calico-kube-controllers-6f67db6b86-", Namespace:"calico-system", SelfLink:"", UID:"213935fc-36c6-4ee5-b2cd-1c20e5fa7b38", ResourceVersion:"1179", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f67db6b86", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"84fe5f83f918411150db38b177520433cc00d8eeaa085906aa2b94db17ea87b0", Pod:"calico-kube-controllers-6f67db6b86-l28z9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calica33e44a032", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.185 [INFO][5534] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.185 [INFO][5534] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" iface="eth0" netns="" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.185 [INFO][5534] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.185 [INFO][5534] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.204 [INFO][5547] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.204 [INFO][5547] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.204 [INFO][5547] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.214 [WARNING][5547] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.214 [INFO][5547] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" HandleID="k8s-pod-network.1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Workload="localhost-k8s-calico--kube--controllers--6f67db6b86--l28z9-eth0" Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.215 [INFO][5547] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.222295 env[1218]: 2025-07-10 00:46:51.217 [INFO][5534] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a" Jul 10 00:46:51.223258 env[1218]: time="2025-07-10T00:46:51.223217656Z" level=info msg="TearDown network for sandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" successfully" Jul 10 00:46:51.223000 audit[5543]: USER_START pid=5543 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.224000 audit[5555]: CRED_ACQ pid=5555 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.228741 env[1218]: time="2025-07-10T00:46:51.228704896Z" level=info msg="RemovePodSandbox \"1a34a2b3d5d1b61ef0906f3b209ea8d0ec0b32a9b661fe900f8b1e732b0a4b0a\" returns successfully" Jul 10 00:46:51.229374 env[1218]: time="2025-07-10T00:46:51.229332136Z" level=info msg="StopPodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\"" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.261 [WARNING][5566] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7425a3-9bb7-4635-92e8-137e4368d192", ResourceVersion:"1257", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80", Pod:"calico-apiserver-56698484bf-kt6p7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali75d67c3d7c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.261 [INFO][5566] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.261 [INFO][5566] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" iface="eth0" netns="" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.261 [INFO][5566] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.261 [INFO][5566] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.288 [INFO][5575] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.288 [INFO][5575] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.288 [INFO][5575] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.299 [WARNING][5575] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.299 [INFO][5575] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.302 [INFO][5575] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.308002 env[1218]: 2025-07-10 00:46:51.304 [INFO][5566] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.308446 env[1218]: time="2025-07-10T00:46:51.308004707Z" level=info msg="TearDown network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" successfully" Jul 10 00:46:51.308446 env[1218]: time="2025-07-10T00:46:51.308056147Z" level=info msg="StopPodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" returns successfully" Jul 10 00:46:51.309224 env[1218]: time="2025-07-10T00:46:51.309090827Z" level=info msg="RemovePodSandbox for \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\"" Jul 10 00:46:51.309224 env[1218]: time="2025-07-10T00:46:51.309123867Z" level=info msg="Forcibly stopping sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\"" Jul 10 00:46:51.377047 sshd[5543]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:51.377000 audit[5543]: USER_END pid=5543 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.377000 audit[5543]: CRED_DISP pid=5543 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:51.380207 systemd[1]: sshd@17-10.0.0.129:22-10.0.0.1:38586.service: Deactivated successfully. Jul 10 00:46:51.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.129:22-10.0.0.1:38586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:51.380963 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:46:51.381306 systemd-logind[1206]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:46:51.383037 systemd-logind[1206]: Removed session 18. Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.361 [WARNING][5601] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0", GenerateName:"calico-apiserver-56698484bf-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7425a3-9bb7-4635-92e8-137e4368d192", ResourceVersion:"1257", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56698484bf", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1994489f693ca7acea94c9d54b7ea2aa01c7d0c65731746e0e40be5bdb096b80", Pod:"calico-apiserver-56698484bf-kt6p7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali75d67c3d7c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.361 [INFO][5601] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.361 [INFO][5601] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" iface="eth0" netns="" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.361 [INFO][5601] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.361 [INFO][5601] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.383 [INFO][5609] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.383 [INFO][5609] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.383 [INFO][5609] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.393 [WARNING][5609] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.393 [INFO][5609] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" HandleID="k8s-pod-network.46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Workload="localhost-k8s-calico--apiserver--56698484bf--kt6p7-eth0" Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.394 [INFO][5609] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.399652 env[1218]: 2025-07-10 00:46:51.397 [INFO][5601] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f" Jul 10 00:46:51.400068 env[1218]: time="2025-07-10T00:46:51.399667758Z" level=info msg="TearDown network for sandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" successfully" Jul 10 00:46:51.402929 env[1218]: time="2025-07-10T00:46:51.402884319Z" level=info msg="RemovePodSandbox \"46969ad8bbdc05087c2d6b051a77e6f503f177db33570efb1f84f01af7c9b60f\" returns successfully" Jul 10 00:46:51.407670 env[1218]: time="2025-07-10T00:46:51.403464719Z" level=info msg="StopPodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\"" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.441 [WARNING][5630] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlxl2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97c6e12f-0612-407a-922b-196d3c8b2bc5", ResourceVersion:"1187", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8", Pod:"csi-node-driver-qlxl2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ebce217621", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.441 [INFO][5630] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.441 [INFO][5630] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" iface="eth0" netns="" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.441 [INFO][5630] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.441 [INFO][5630] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.459 [INFO][5639] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.459 [INFO][5639] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.459 [INFO][5639] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.468 [WARNING][5639] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.468 [INFO][5639] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.469 [INFO][5639] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.473166 env[1218]: 2025-07-10 00:46:51.471 [INFO][5630] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.473593 env[1218]: time="2025-07-10T00:46:51.473198808Z" level=info msg="TearDown network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" successfully" Jul 10 00:46:51.473593 env[1218]: time="2025-07-10T00:46:51.473231168Z" level=info msg="StopPodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" returns successfully" Jul 10 00:46:51.474779 env[1218]: time="2025-07-10T00:46:51.474074688Z" level=info msg="RemovePodSandbox for \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\"" Jul 10 00:46:51.474779 env[1218]: time="2025-07-10T00:46:51.474113768Z" level=info msg="Forcibly stopping sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\"" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.510 [WARNING][5658] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlxl2-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97c6e12f-0612-407a-922b-196d3c8b2bc5", ResourceVersion:"1187", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 46, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8fa3b9c617bcad6a701b629afce528e7692d6f7c9ae211a9092982e9763f54e8", Pod:"csi-node-driver-qlxl2", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7ebce217621", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.510 [INFO][5658] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.510 [INFO][5658] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" iface="eth0" netns="" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.510 [INFO][5658] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.510 [INFO][5658] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.527 [INFO][5667] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.528 [INFO][5667] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.528 [INFO][5667] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.536 [WARNING][5667] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.536 [INFO][5667] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" HandleID="k8s-pod-network.25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Workload="localhost-k8s-csi--node--driver--qlxl2-eth0" Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.537 [INFO][5667] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:46:51.540546 env[1218]: 2025-07-10 00:46:51.539 [INFO][5658] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c" Jul 10 00:46:51.541061 env[1218]: time="2025-07-10T00:46:51.541026537Z" level=info msg="TearDown network for sandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" successfully" Jul 10 00:46:51.543850 env[1218]: time="2025-07-10T00:46:51.543795057Z" level=info msg="RemovePodSandbox \"25dba21de88a657b85eec7dd972a3f00f11f2511a76c119a61cfc3a895b2785c\" returns successfully" Jul 10 00:46:53.208000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:53.208000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013f9320 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:46:53.208000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:46:53.211000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:53.211000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40009b57e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:46:53.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:46:53.211000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:53.211000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f1c9a0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:46:53.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:46:53.211000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:46:53.211000 audit[1837]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002a26060 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c707,c748 key=(null) Jul 10 00:46:53.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:46:54.325096 systemd[1]: run-containerd-runc-k8s.io-71f08d98d408a8fe3bbdb8604857e847600271776f98d3479d9625de3c7445ac-runc.8qZkUb.mount: Deactivated successfully. Jul 10 00:46:56.360681 kernel: kauditd_printk_skb: 69 callbacks suppressed Jul 10 00:46:56.360832 kernel: audit: type=1325 audit(1752108416.358:1598): table=filter:130 family=2 entries=20 op=nft_register_rule pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:56.358000 audit[5707]: NETFILTER_CFG table=filter:130 family=2 entries=20 op=nft_register_rule pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:56.358000 audit[5707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe3dc36c0 a2=0 a3=1 items=0 ppid=2084 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:56.365876 kernel: audit: type=1300 audit(1752108416.358:1598): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe3dc36c0 a2=0 a3=1 items=0 ppid=2084 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:56.365928 kernel: audit: type=1327 audit(1752108416.358:1598): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:56.358000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:56.369000 audit[5707]: NETFILTER_CFG table=nat:131 family=2 entries=110 op=nft_register_chain pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:56.369000 audit[5707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffe3dc36c0 a2=0 a3=1 items=0 ppid=2084 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:56.376912 kernel: audit: type=1325 audit(1752108416.369:1599): table=nat:131 family=2 entries=110 op=nft_register_chain pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:56.376999 kernel: audit: type=1300 audit(1752108416.369:1599): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffe3dc36c0 a2=0 a3=1 items=0 ppid=2084 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:56.377023 kernel: audit: type=1327 audit(1752108416.369:1599): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:56.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:56.383384 systemd[1]: Started sshd@18-10.0.0.129:22-10.0.0.1:44832.service. Jul 10 00:46:56.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.129:22-10.0.0.1:44832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:56.387851 kernel: audit: type=1130 audit(1752108416.382:1600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.129:22-10.0.0.1:44832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:56.418000 audit[5709]: USER_ACCT pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.419686 sshd[5709]: Accepted publickey for core from 10.0.0.1 port 44832 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:46:56.421072 sshd[5709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:56.419000 audit[5709]: CRED_ACQ pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.425637 kernel: audit: type=1101 audit(1752108416.418:1601): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.425712 kernel: audit: type=1103 audit(1752108416.419:1602): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.427644 kernel: audit: type=1006 audit(1752108416.419:1603): pid=5709 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 10 00:46:56.419000 audit[5709]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc287fcc0 a2=3 a3=1 items=0 ppid=1 pid=5709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:56.419000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:56.430249 systemd-logind[1206]: New session 19 of user core. Jul 10 00:46:56.430464 systemd[1]: Started session-19.scope. Jul 10 00:46:56.433000 audit[5709]: USER_START pid=5709 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.434000 audit[5711]: CRED_ACQ pid=5711 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.541471 sshd[5709]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:56.541000 audit[5709]: USER_END pid=5709 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.541000 audit[5709]: CRED_DISP pid=5709 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:56.543779 systemd[1]: sshd@18-10.0.0.129:22-10.0.0.1:44832.service: Deactivated successfully. Jul 10 00:46:56.544582 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:46:56.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.129:22-10.0.0.1:44832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:56.545151 systemd-logind[1206]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:46:56.545917 systemd-logind[1206]: Removed session 19. Jul 10 00:46:59.966587 kubelet[1971]: I0710 00:46:59.966284 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:47:00.003000 audit[5725]: NETFILTER_CFG table=filter:132 family=2 entries=8 op=nft_register_rule pid=5725 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:00.003000 audit[5725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffdc31a070 a2=0 a3=1 items=0 ppid=2084 pid=5725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:00.003000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:00.012000 audit[5725]: NETFILTER_CFG table=nat:133 family=2 entries=62 op=nft_register_chain pid=5725 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:00.012000 audit[5725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffdc31a070 a2=0 a3=1 items=0 ppid=2084 pid=5725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:00.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:01.547456 systemd[1]: Started sshd@19-10.0.0.129:22-10.0.0.1:44842.service. Jul 10 00:47:01.548841 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:47:01.548901 kernel: audit: type=1130 audit(1752108421.546:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.129:22-10.0.0.1:44842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:01.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.129:22-10.0.0.1:44842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:01.580000 audit[5730]: USER_ACCT pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.581638 sshd[5730]: Accepted publickey for core from 10.0.0.1 port 44842 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:47:01.582751 sshd[5730]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:01.581000 audit[5730]: CRED_ACQ pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.586290 systemd-logind[1206]: New session 20 of user core. Jul 10 00:47:01.586996 systemd[1]: Started session-20.scope. Jul 10 00:47:01.587617 kernel: audit: type=1101 audit(1752108421.580:1612): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.587675 kernel: audit: type=1103 audit(1752108421.581:1613): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.587695 kernel: audit: type=1006 audit(1752108421.581:1614): pid=5730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 10 00:47:01.581000 audit[5730]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8f18390 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:01.592578 kernel: audit: type=1300 audit(1752108421.581:1614): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8f18390 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:01.592634 kernel: audit: type=1327 audit(1752108421.581:1614): proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:01.581000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:01.590000 audit[5730]: USER_START pid=5730 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.597203 kernel: audit: type=1105 audit(1752108421.590:1615): pid=5730 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.591000 audit[5732]: CRED_ACQ pid=5732 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.599969 kernel: audit: type=1103 audit(1752108421.591:1616): pid=5732 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.699450 sshd[5730]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:01.699000 audit[5730]: USER_END pid=5730 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.702118 systemd[1]: sshd@19-10.0.0.129:22-10.0.0.1:44842.service: Deactivated successfully. Jul 10 00:47:01.702905 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:47:01.703426 systemd-logind[1206]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:47:01.704119 systemd-logind[1206]: Removed session 20. Jul 10 00:47:01.707528 kernel: audit: type=1106 audit(1752108421.699:1617): pid=5730 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.707633 kernel: audit: type=1104 audit(1752108421.699:1618): pid=5730 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.699000 audit[5730]: CRED_DISP pid=5730 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:01.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.129:22-10.0.0.1:44842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.195017 kubelet[1971]: E0710 00:47:03.194981 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:06.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.129:22-10.0.0.1:59340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:06.704055 systemd[1]: Started sshd@20-10.0.0.129:22-10.0.0.1:59340.service. Jul 10 00:47:06.705381 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:47:06.705416 kernel: audit: type=1130 audit(1752108426.703:1620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.129:22-10.0.0.1:59340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:06.751000 audit[5764]: USER_ACCT pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.752375 sshd[5764]: Accepted publickey for core from 10.0.0.1 port 59340 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:47:06.754084 sshd[5764]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:06.752000 audit[5764]: CRED_ACQ pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.760146 systemd-logind[1206]: New session 21 of user core. Jul 10 00:47:06.763393 kernel: audit: type=1101 audit(1752108426.751:1621): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.763427 kernel: audit: type=1103 audit(1752108426.752:1622): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.763450 kernel: audit: type=1006 audit(1752108426.752:1623): pid=5764 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 10 00:47:06.763468 kernel: audit: type=1300 audit(1752108426.752:1623): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb703110 a2=3 a3=1 items=0 ppid=1 pid=5764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.752000 audit[5764]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb703110 a2=3 a3=1 items=0 ppid=1 pid=5764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.763317 systemd[1]: Started session-21.scope. Jul 10 00:47:06.752000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:06.771517 kernel: audit: type=1327 audit(1752108426.752:1623): proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:06.771577 kernel: audit: type=1105 audit(1752108426.768:1624): pid=5764 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.768000 audit[5764]: USER_START pid=5764 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.769000 audit[5766]: CRED_ACQ pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.778988 kernel: audit: type=1103 audit(1752108426.769:1625): pid=5766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.881259 sshd[5764]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:06.881000 audit[5764]: USER_END pid=5764 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.884516 systemd[1]: sshd@20-10.0.0.129:22-10.0.0.1:59340.service: Deactivated successfully. Jul 10 00:47:06.884689 systemd-logind[1206]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:47:06.885326 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:47:06.882000 audit[5764]: CRED_DISP pid=5764 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.885998 systemd-logind[1206]: Removed session 21. Jul 10 00:47:06.888921 kernel: audit: type=1106 audit(1752108426.881:1626): pid=5764 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.888989 kernel: audit: type=1104 audit(1752108426.882:1627): pid=5764 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:06.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.129:22-10.0.0.1:59340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'