Jul 11 00:28:35.713100 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 11 00:28:35.713120 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Thu Jul 10 23:22:35 -00 2025 Jul 11 00:28:35.713128 kernel: efi: EFI v2.70 by EDK II Jul 11 00:28:35.713134 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 11 00:28:35.713139 kernel: random: crng init done Jul 11 00:28:35.713144 kernel: ACPI: Early table checksum verification disabled Jul 11 00:28:35.713150 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 11 00:28:35.713156 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 11 00:28:35.713183 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713188 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713194 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713199 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713205 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713210 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713218 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713224 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713230 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:28:35.713235 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 11 00:28:35.713241 kernel: NUMA: Failed to initialise from firmware Jul 11 00:28:35.713247 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:28:35.713252 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Jul 11 00:28:35.713258 kernel: Zone ranges: Jul 11 00:28:35.713264 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:28:35.713271 kernel: DMA32 empty Jul 11 00:28:35.713276 kernel: Normal empty Jul 11 00:28:35.713282 kernel: Movable zone start for each node Jul 11 00:28:35.713287 kernel: Early memory node ranges Jul 11 00:28:35.713293 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 11 00:28:35.713299 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 11 00:28:35.713304 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 11 00:28:35.713310 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 11 00:28:35.713316 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 11 00:28:35.713321 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 11 00:28:35.713327 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 11 00:28:35.713333 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:28:35.713340 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 11 00:28:35.713345 kernel: psci: probing for conduit method from ACPI. Jul 11 00:28:35.713351 kernel: psci: PSCIv1.1 detected in firmware. Jul 11 00:28:35.713356 kernel: psci: Using standard PSCI v0.2 function IDs Jul 11 00:28:35.713362 kernel: psci: Trusted OS migration not required Jul 11 00:28:35.713370 kernel: psci: SMC Calling Convention v1.1 Jul 11 00:28:35.713376 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 11 00:28:35.713383 kernel: ACPI: SRAT not present Jul 11 00:28:35.713390 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 11 00:28:35.713408 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 11 00:28:35.713414 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 11 00:28:35.713420 kernel: Detected PIPT I-cache on CPU0 Jul 11 00:28:35.713426 kernel: CPU features: detected: GIC system register CPU interface Jul 11 00:28:35.713432 kernel: CPU features: detected: Hardware dirty bit management Jul 11 00:28:35.713438 kernel: CPU features: detected: Spectre-v4 Jul 11 00:28:35.713444 kernel: CPU features: detected: Spectre-BHB Jul 11 00:28:35.713452 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 11 00:28:35.713458 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 11 00:28:35.713464 kernel: CPU features: detected: ARM erratum 1418040 Jul 11 00:28:35.713470 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 11 00:28:35.713476 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 11 00:28:35.713482 kernel: Policy zone: DMA Jul 11 00:28:35.713489 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:28:35.713495 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 11 00:28:35.713501 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 11 00:28:35.713507 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 11 00:28:35.713513 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 11 00:28:35.713521 kernel: Memory: 2457336K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114952K reserved, 0K cma-reserved) Jul 11 00:28:35.713527 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 11 00:28:35.713533 kernel: trace event string verifier disabled Jul 11 00:28:35.713540 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 11 00:28:35.713546 kernel: rcu: RCU event tracing is enabled. Jul 11 00:28:35.713553 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 11 00:28:35.713559 kernel: Trampoline variant of Tasks RCU enabled. Jul 11 00:28:35.713565 kernel: Tracing variant of Tasks RCU enabled. Jul 11 00:28:35.713571 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 11 00:28:35.713578 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 11 00:28:35.713584 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 11 00:28:35.713591 kernel: GICv3: 256 SPIs implemented Jul 11 00:28:35.713597 kernel: GICv3: 0 Extended SPIs implemented Jul 11 00:28:35.713603 kernel: GICv3: Distributor has no Range Selector support Jul 11 00:28:35.713609 kernel: Root IRQ handler: gic_handle_irq Jul 11 00:28:35.713627 kernel: GICv3: 16 PPIs implemented Jul 11 00:28:35.713634 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 11 00:28:35.713640 kernel: ACPI: SRAT not present Jul 11 00:28:35.713646 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 11 00:28:35.713652 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 11 00:28:35.713659 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 11 00:28:35.713665 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 11 00:28:35.713671 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 11 00:28:35.713678 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:28:35.713684 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 11 00:28:35.713691 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 11 00:28:35.713697 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 11 00:28:35.713703 kernel: arm-pv: using stolen time PV Jul 11 00:28:35.713709 kernel: Console: colour dummy device 80x25 Jul 11 00:28:35.713715 kernel: ACPI: Core revision 20210730 Jul 11 00:28:35.713722 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 11 00:28:35.713728 kernel: pid_max: default: 32768 minimum: 301 Jul 11 00:28:35.713735 kernel: LSM: Security Framework initializing Jul 11 00:28:35.713742 kernel: SELinux: Initializing. Jul 11 00:28:35.713749 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:28:35.713755 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:28:35.713761 kernel: rcu: Hierarchical SRCU implementation. Jul 11 00:28:35.713767 kernel: Platform MSI: ITS@0x8080000 domain created Jul 11 00:28:35.713773 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 11 00:28:35.713780 kernel: Remapping and enabling EFI services. Jul 11 00:28:35.713786 kernel: smp: Bringing up secondary CPUs ... Jul 11 00:28:35.713792 kernel: Detected PIPT I-cache on CPU1 Jul 11 00:28:35.713799 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 11 00:28:35.713806 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 11 00:28:35.713812 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:28:35.713820 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 11 00:28:35.713826 kernel: Detected PIPT I-cache on CPU2 Jul 11 00:28:35.713832 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 11 00:28:35.713845 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 11 00:28:35.713852 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:28:35.713858 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 11 00:28:35.713864 kernel: Detected PIPT I-cache on CPU3 Jul 11 00:28:35.713871 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 11 00:28:35.713878 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 11 00:28:35.713884 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:28:35.713890 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 11 00:28:35.713900 kernel: smp: Brought up 1 node, 4 CPUs Jul 11 00:28:35.713908 kernel: SMP: Total of 4 processors activated. Jul 11 00:28:35.713915 kernel: CPU features: detected: 32-bit EL0 Support Jul 11 00:28:35.713921 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 11 00:28:35.713928 kernel: CPU features: detected: Common not Private translations Jul 11 00:28:35.713935 kernel: CPU features: detected: CRC32 instructions Jul 11 00:28:35.713941 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 11 00:28:35.713947 kernel: CPU features: detected: LSE atomic instructions Jul 11 00:28:35.713955 kernel: CPU features: detected: Privileged Access Never Jul 11 00:28:35.713962 kernel: CPU features: detected: RAS Extension Support Jul 11 00:28:35.713968 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 11 00:28:35.713975 kernel: CPU: All CPU(s) started at EL1 Jul 11 00:28:35.713981 kernel: alternatives: patching kernel code Jul 11 00:28:35.713989 kernel: devtmpfs: initialized Jul 11 00:28:35.713995 kernel: KASLR enabled Jul 11 00:28:35.714002 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 11 00:28:35.714009 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 11 00:28:35.714016 kernel: pinctrl core: initialized pinctrl subsystem Jul 11 00:28:35.714022 kernel: SMBIOS 3.0.0 present. Jul 11 00:28:35.714028 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 11 00:28:35.714035 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 11 00:28:35.714042 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 11 00:28:35.714049 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 11 00:28:35.714056 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 11 00:28:35.714062 kernel: audit: initializing netlink subsys (disabled) Jul 11 00:28:35.714069 kernel: audit: type=2000 audit(0.048:1): state=initialized audit_enabled=0 res=1 Jul 11 00:28:35.714075 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 11 00:28:35.714082 kernel: cpuidle: using governor menu Jul 11 00:28:35.714089 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 11 00:28:35.714095 kernel: ASID allocator initialised with 32768 entries Jul 11 00:28:35.714101 kernel: ACPI: bus type PCI registered Jul 11 00:28:35.714109 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 11 00:28:35.714116 kernel: Serial: AMBA PL011 UART driver Jul 11 00:28:35.714122 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 11 00:28:35.714129 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 11 00:28:35.714135 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 11 00:28:35.714142 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 11 00:28:35.714148 kernel: cryptd: max_cpu_qlen set to 1000 Jul 11 00:28:35.714155 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 11 00:28:35.714162 kernel: ACPI: Added _OSI(Module Device) Jul 11 00:28:35.714169 kernel: ACPI: Added _OSI(Processor Device) Jul 11 00:28:35.714176 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 11 00:28:35.714182 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 11 00:28:35.714188 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 11 00:28:35.714195 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 11 00:28:35.714201 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 11 00:28:35.714208 kernel: ACPI: Interpreter enabled Jul 11 00:28:35.714214 kernel: ACPI: Using GIC for interrupt routing Jul 11 00:28:35.714221 kernel: ACPI: MCFG table detected, 1 entries Jul 11 00:28:35.714228 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 11 00:28:35.714235 kernel: printk: console [ttyAMA0] enabled Jul 11 00:28:35.714241 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 11 00:28:35.714357 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 11 00:28:35.714455 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 11 00:28:35.714518 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 11 00:28:35.714575 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 11 00:28:35.714653 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 11 00:28:35.714663 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 11 00:28:35.714670 kernel: PCI host bridge to bus 0000:00 Jul 11 00:28:35.714742 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 11 00:28:35.714795 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 11 00:28:35.714853 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 11 00:28:35.714907 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 11 00:28:35.714993 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 11 00:28:35.715071 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 11 00:28:35.715131 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 11 00:28:35.715189 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 11 00:28:35.715247 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:28:35.715305 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:28:35.715362 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 11 00:28:35.715433 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 11 00:28:35.715485 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 11 00:28:35.715536 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 11 00:28:35.715587 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 11 00:28:35.715595 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 11 00:28:35.715602 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 11 00:28:35.715609 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 11 00:28:35.715617 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 11 00:28:35.715623 kernel: iommu: Default domain type: Translated Jul 11 00:28:35.715630 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 11 00:28:35.715637 kernel: vgaarb: loaded Jul 11 00:28:35.715643 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 11 00:28:35.715650 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 11 00:28:35.715656 kernel: PTP clock support registered Jul 11 00:28:35.715663 kernel: Registered efivars operations Jul 11 00:28:35.715669 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 11 00:28:35.715676 kernel: VFS: Disk quotas dquot_6.6.0 Jul 11 00:28:35.715684 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 11 00:28:35.715690 kernel: pnp: PnP ACPI init Jul 11 00:28:35.715754 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 11 00:28:35.715763 kernel: pnp: PnP ACPI: found 1 devices Jul 11 00:28:35.715769 kernel: NET: Registered PF_INET protocol family Jul 11 00:28:35.715776 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 11 00:28:35.715783 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 11 00:28:35.715789 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 11 00:28:35.715798 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 11 00:28:35.715804 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 11 00:28:35.715811 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 11 00:28:35.715817 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:28:35.715824 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:28:35.715830 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 11 00:28:35.715843 kernel: PCI: CLS 0 bytes, default 64 Jul 11 00:28:35.715850 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 11 00:28:35.715857 kernel: kvm [1]: HYP mode not available Jul 11 00:28:35.715865 kernel: Initialise system trusted keyrings Jul 11 00:28:35.715872 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 11 00:28:35.715878 kernel: Key type asymmetric registered Jul 11 00:28:35.715884 kernel: Asymmetric key parser 'x509' registered Jul 11 00:28:35.715891 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 11 00:28:35.715897 kernel: io scheduler mq-deadline registered Jul 11 00:28:35.715903 kernel: io scheduler kyber registered Jul 11 00:28:35.715910 kernel: io scheduler bfq registered Jul 11 00:28:35.715917 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 11 00:28:35.715924 kernel: ACPI: button: Power Button [PWRB] Jul 11 00:28:35.715931 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 11 00:28:35.715990 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 11 00:28:35.715999 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 11 00:28:35.716006 kernel: thunder_xcv, ver 1.0 Jul 11 00:28:35.716012 kernel: thunder_bgx, ver 1.0 Jul 11 00:28:35.716018 kernel: nicpf, ver 1.0 Jul 11 00:28:35.716025 kernel: nicvf, ver 1.0 Jul 11 00:28:35.716094 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 11 00:28:35.716156 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-11T00:28:35 UTC (1752193715) Jul 11 00:28:35.716164 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 11 00:28:35.716171 kernel: NET: Registered PF_INET6 protocol family Jul 11 00:28:35.716177 kernel: Segment Routing with IPv6 Jul 11 00:28:35.716184 kernel: In-situ OAM (IOAM) with IPv6 Jul 11 00:28:35.716190 kernel: NET: Registered PF_PACKET protocol family Jul 11 00:28:35.716197 kernel: Key type dns_resolver registered Jul 11 00:28:35.716203 kernel: registered taskstats version 1 Jul 11 00:28:35.716212 kernel: Loading compiled-in X.509 certificates Jul 11 00:28:35.716219 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: e29f2f0310c2b60e0457f826e7476605fb3b6ab2' Jul 11 00:28:35.716225 kernel: Key type .fscrypt registered Jul 11 00:28:35.716232 kernel: Key type fscrypt-provisioning registered Jul 11 00:28:35.716238 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 11 00:28:35.716245 kernel: ima: Allocated hash algorithm: sha1 Jul 11 00:28:35.716251 kernel: ima: No architecture policies found Jul 11 00:28:35.716258 kernel: clk: Disabling unused clocks Jul 11 00:28:35.716264 kernel: Freeing unused kernel memory: 36416K Jul 11 00:28:35.716272 kernel: Run /init as init process Jul 11 00:28:35.716279 kernel: with arguments: Jul 11 00:28:35.716285 kernel: /init Jul 11 00:28:35.716291 kernel: with environment: Jul 11 00:28:35.716298 kernel: HOME=/ Jul 11 00:28:35.716304 kernel: TERM=linux Jul 11 00:28:35.716311 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 11 00:28:35.716319 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:28:35.716329 systemd[1]: Detected virtualization kvm. Jul 11 00:28:35.716336 systemd[1]: Detected architecture arm64. Jul 11 00:28:35.716343 systemd[1]: Running in initrd. Jul 11 00:28:35.716349 systemd[1]: No hostname configured, using default hostname. Jul 11 00:28:35.716356 systemd[1]: Hostname set to . Jul 11 00:28:35.716363 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:28:35.716370 systemd[1]: Queued start job for default target initrd.target. Jul 11 00:28:35.716377 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:28:35.716385 systemd[1]: Reached target cryptsetup.target. Jul 11 00:28:35.716392 systemd[1]: Reached target paths.target. Jul 11 00:28:35.716407 systemd[1]: Reached target slices.target. Jul 11 00:28:35.716414 systemd[1]: Reached target swap.target. Jul 11 00:28:35.716420 systemd[1]: Reached target timers.target. Jul 11 00:28:35.716428 systemd[1]: Listening on iscsid.socket. Jul 11 00:28:35.716435 systemd[1]: Listening on iscsiuio.socket. Jul 11 00:28:35.716443 systemd[1]: Listening on systemd-journald-audit.socket. Jul 11 00:28:35.716450 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 11 00:28:35.716457 systemd[1]: Listening on systemd-journald.socket. Jul 11 00:28:35.716464 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:28:35.716470 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:28:35.716477 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:28:35.716484 systemd[1]: Reached target sockets.target. Jul 11 00:28:35.716491 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:28:35.716498 systemd[1]: Finished network-cleanup.service. Jul 11 00:28:35.716506 systemd[1]: Starting systemd-fsck-usr.service... Jul 11 00:28:35.716513 systemd[1]: Starting systemd-journald.service... Jul 11 00:28:35.716520 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:28:35.716527 systemd[1]: Starting systemd-resolved.service... Jul 11 00:28:35.716533 systemd[1]: Starting systemd-vconsole-setup.service... Jul 11 00:28:35.716540 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:28:35.716547 systemd[1]: Finished systemd-fsck-usr.service. Jul 11 00:28:35.716554 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 11 00:28:35.716561 systemd[1]: Finished systemd-vconsole-setup.service. Jul 11 00:28:35.716569 kernel: audit: type=1130 audit(1752193715.713:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.716576 systemd[1]: Starting dracut-cmdline-ask.service... Jul 11 00:28:35.716587 systemd-journald[290]: Journal started Jul 11 00:28:35.716623 systemd-journald[290]: Runtime Journal (/run/log/journal/c2f1069f1d9641378957198342fdc928) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:28:35.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.707927 systemd-modules-load[291]: Inserted module 'overlay' Jul 11 00:28:35.718175 systemd[1]: Started systemd-journald.service. Jul 11 00:28:35.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.719076 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 11 00:28:35.722806 kernel: audit: type=1130 audit(1752193715.718:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.722825 kernel: audit: type=1130 audit(1752193715.720:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.734245 systemd[1]: Finished dracut-cmdline-ask.service. Jul 11 00:28:35.738088 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 11 00:28:35.738104 kernel: audit: type=1130 audit(1752193715.734:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.738114 kernel: Bridge firewalling registered Jul 11 00:28:35.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.735570 systemd[1]: Starting dracut-cmdline.service... Jul 11 00:28:35.737468 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 11 00:28:35.737938 systemd-resolved[292]: Positive Trust Anchors: Jul 11 00:28:35.737945 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:28:35.737971 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:28:35.742648 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 11 00:28:35.749742 kernel: audit: type=1130 audit(1752193715.746:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.749761 kernel: SCSI subsystem initialized Jul 11 00:28:35.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.743405 systemd[1]: Started systemd-resolved.service. Jul 11 00:28:35.747194 systemd[1]: Reached target nss-lookup.target. Jul 11 00:28:35.753369 dracut-cmdline[308]: dracut-dracut-053 Jul 11 00:28:35.755570 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:28:35.759902 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 11 00:28:35.759918 kernel: device-mapper: uevent: version 1.0.3 Jul 11 00:28:35.759926 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 11 00:28:35.762820 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 11 00:28:35.763566 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:28:35.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.765260 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:28:35.768980 kernel: audit: type=1130 audit(1752193715.764:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.772269 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:28:35.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.775419 kernel: audit: type=1130 audit(1752193715.772:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.817417 kernel: Loading iSCSI transport class v2.0-870. Jul 11 00:28:35.829415 kernel: iscsi: registered transport (tcp) Jul 11 00:28:35.843515 kernel: iscsi: registered transport (qla4xxx) Jul 11 00:28:35.843527 kernel: QLogic iSCSI HBA Driver Jul 11 00:28:35.877588 systemd[1]: Finished dracut-cmdline.service. Jul 11 00:28:35.878993 systemd[1]: Starting dracut-pre-udev.service... Jul 11 00:28:35.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.882432 kernel: audit: type=1130 audit(1752193715.877:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:35.920423 kernel: raid6: neonx8 gen() 12205 MB/s Jul 11 00:28:35.937421 kernel: raid6: neonx8 xor() 10780 MB/s Jul 11 00:28:35.954409 kernel: raid6: neonx4 gen() 13519 MB/s Jul 11 00:28:35.971415 kernel: raid6: neonx4 xor() 11103 MB/s Jul 11 00:28:35.988407 kernel: raid6: neonx2 gen() 13064 MB/s Jul 11 00:28:36.005419 kernel: raid6: neonx2 xor() 10395 MB/s Jul 11 00:28:36.022426 kernel: raid6: neonx1 gen() 10532 MB/s Jul 11 00:28:36.039418 kernel: raid6: neonx1 xor() 8798 MB/s Jul 11 00:28:36.056421 kernel: raid6: int64x8 gen() 6254 MB/s Jul 11 00:28:36.073421 kernel: raid6: int64x8 xor() 3535 MB/s Jul 11 00:28:36.090420 kernel: raid6: int64x4 gen() 7209 MB/s Jul 11 00:28:36.107413 kernel: raid6: int64x4 xor() 3843 MB/s Jul 11 00:28:36.124411 kernel: raid6: int64x2 gen() 6143 MB/s Jul 11 00:28:36.141420 kernel: raid6: int64x2 xor() 3309 MB/s Jul 11 00:28:36.158419 kernel: raid6: int64x1 gen() 5033 MB/s Jul 11 00:28:36.175599 kernel: raid6: int64x1 xor() 2638 MB/s Jul 11 00:28:36.175609 kernel: raid6: using algorithm neonx4 gen() 13519 MB/s Jul 11 00:28:36.175617 kernel: raid6: .... xor() 11103 MB/s, rmw enabled Jul 11 00:28:36.175625 kernel: raid6: using neon recovery algorithm Jul 11 00:28:36.186414 kernel: xor: measuring software checksum speed Jul 11 00:28:36.186429 kernel: 8regs : 17238 MB/sec Jul 11 00:28:36.187879 kernel: 32regs : 18825 MB/sec Jul 11 00:28:36.187901 kernel: arm64_neon : 27177 MB/sec Jul 11 00:28:36.187917 kernel: xor: using function: arm64_neon (27177 MB/sec) Jul 11 00:28:36.257415 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 11 00:28:36.270817 systemd[1]: Finished dracut-pre-udev.service. Jul 11 00:28:36.272503 systemd[1]: Starting systemd-udevd.service... Jul 11 00:28:36.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:36.275443 kernel: audit: type=1130 audit(1752193716.271:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:36.271000 audit: BPF prog-id=7 op=LOAD Jul 11 00:28:36.271000 audit: BPF prog-id=8 op=LOAD Jul 11 00:28:36.287145 systemd-udevd[491]: Using default interface naming scheme 'v252'. Jul 11 00:28:36.290694 systemd[1]: Started systemd-udevd.service. Jul 11 00:28:36.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:36.292782 systemd[1]: Starting dracut-pre-trigger.service... Jul 11 00:28:36.303572 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Jul 11 00:28:36.330768 systemd[1]: Finished dracut-pre-trigger.service. Jul 11 00:28:36.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:36.332169 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:28:36.365551 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:28:36.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:36.396071 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 11 00:28:36.398416 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 11 00:28:36.398431 kernel: GPT:9289727 != 19775487 Jul 11 00:28:36.398440 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 11 00:28:36.398449 kernel: GPT:9289727 != 19775487 Jul 11 00:28:36.398456 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 11 00:28:36.398464 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:28:36.413420 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (544) Jul 11 00:28:36.415755 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 11 00:28:36.418664 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 11 00:28:36.419649 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 11 00:28:36.426404 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 11 00:28:36.429824 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:28:36.431537 systemd[1]: Starting disk-uuid.service... Jul 11 00:28:36.437450 disk-uuid[561]: Primary Header is updated. Jul 11 00:28:36.437450 disk-uuid[561]: Secondary Entries is updated. Jul 11 00:28:36.437450 disk-uuid[561]: Secondary Header is updated. Jul 11 00:28:36.441424 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:28:37.456536 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:28:37.457041 disk-uuid[562]: The operation has completed successfully. Jul 11 00:28:37.482661 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 11 00:28:37.482757 systemd[1]: Finished disk-uuid.service. Jul 11 00:28:37.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.484435 systemd[1]: Starting verity-setup.service... Jul 11 00:28:37.502430 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 11 00:28:37.531327 systemd[1]: Found device dev-mapper-usr.device. Jul 11 00:28:37.532893 systemd[1]: Mounting sysusr-usr.mount... Jul 11 00:28:37.533661 systemd[1]: Finished verity-setup.service. Jul 11 00:28:37.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.582283 systemd[1]: Mounted sysusr-usr.mount. Jul 11 00:28:37.583295 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 11 00:28:37.582969 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 11 00:28:37.583685 systemd[1]: Starting ignition-setup.service... Jul 11 00:28:37.585421 systemd[1]: Starting parse-ip-for-networkd.service... Jul 11 00:28:37.592803 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:28:37.592846 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:28:37.592857 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:28:37.601124 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 11 00:28:37.610793 systemd[1]: Finished ignition-setup.service. Jul 11 00:28:37.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.612198 systemd[1]: Starting ignition-fetch-offline.service... Jul 11 00:28:37.666870 systemd[1]: Finished parse-ip-for-networkd.service. Jul 11 00:28:37.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.667000 audit: BPF prog-id=9 op=LOAD Jul 11 00:28:37.668917 systemd[1]: Starting systemd-networkd.service... Jul 11 00:28:37.691442 systemd-networkd[738]: lo: Link UP Jul 11 00:28:37.691452 systemd-networkd[738]: lo: Gained carrier Jul 11 00:28:37.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.691842 systemd-networkd[738]: Enumeration completed Jul 11 00:28:37.691959 systemd[1]: Started systemd-networkd.service. Jul 11 00:28:37.692020 systemd-networkd[738]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:28:37.692931 systemd-networkd[738]: eth0: Link UP Jul 11 00:28:37.692934 systemd-networkd[738]: eth0: Gained carrier Jul 11 00:28:37.693436 systemd[1]: Reached target network.target. Jul 11 00:28:37.695089 systemd[1]: Starting iscsiuio.service... Jul 11 00:28:37.704381 systemd[1]: Started iscsiuio.service. Jul 11 00:28:37.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.705904 systemd[1]: Starting iscsid.service... Jul 11 00:28:37.709445 iscsid[743]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:28:37.709445 iscsid[743]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 11 00:28:37.709445 iscsid[743]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 11 00:28:37.709445 iscsid[743]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 11 00:28:37.709445 iscsid[743]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:28:37.709445 iscsid[743]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 11 00:28:37.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.712991 systemd[1]: Started iscsid.service. Jul 11 00:28:37.717758 systemd[1]: Starting dracut-initqueue.service... Jul 11 00:28:37.724482 systemd-networkd[738]: eth0: DHCPv4 address 10.0.0.65/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:28:37.730176 ignition[655]: Ignition 2.14.0 Jul 11 00:28:37.730186 ignition[655]: Stage: fetch-offline Jul 11 00:28:37.730222 ignition[655]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:28:37.730230 ignition[655]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:28:37.730351 ignition[655]: parsed url from cmdline: "" Jul 11 00:28:37.730354 ignition[655]: no config URL provided Jul 11 00:28:37.730359 ignition[655]: reading system config file "/usr/lib/ignition/user.ign" Jul 11 00:28:37.730366 ignition[655]: no config at "/usr/lib/ignition/user.ign" Jul 11 00:28:37.734961 systemd[1]: Finished dracut-initqueue.service. Jul 11 00:28:37.730383 ignition[655]: op(1): [started] loading QEMU firmware config module Jul 11 00:28:37.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.735853 systemd[1]: Reached target remote-fs-pre.target. Jul 11 00:28:37.730388 ignition[655]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 11 00:28:37.736613 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:28:37.734513 ignition[655]: op(1): [finished] loading QEMU firmware config module Jul 11 00:28:37.738104 systemd[1]: Reached target remote-fs.target. Jul 11 00:28:37.734534 ignition[655]: QEMU firmware config was not found. Ignoring... Jul 11 00:28:37.740144 systemd[1]: Starting dracut-pre-mount.service... Jul 11 00:28:37.748073 systemd[1]: Finished dracut-pre-mount.service. Jul 11 00:28:37.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.781900 ignition[655]: parsing config with SHA512: 58d513b84a47339c983e9db549eabde6c7d15187d6c00c9f25f595995f2da5fab66bf8a43ee1979c678df33fe6a1780b9cd422667ff3e35daf38fa9ece665932 Jul 11 00:28:37.790067 unknown[655]: fetched base config from "system" Jul 11 00:28:37.790079 unknown[655]: fetched user config from "qemu" Jul 11 00:28:37.790557 ignition[655]: fetch-offline: fetch-offline passed Jul 11 00:28:37.791617 systemd[1]: Finished ignition-fetch-offline.service. Jul 11 00:28:37.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.790613 ignition[655]: Ignition finished successfully Jul 11 00:28:37.793243 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 11 00:28:37.794075 systemd[1]: Starting ignition-kargs.service... Jul 11 00:28:37.803736 ignition[759]: Ignition 2.14.0 Jul 11 00:28:37.803746 ignition[759]: Stage: kargs Jul 11 00:28:37.803852 ignition[759]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:28:37.803862 ignition[759]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:28:37.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.804853 ignition[759]: kargs: kargs passed Jul 11 00:28:37.806005 systemd[1]: Finished ignition-kargs.service. Jul 11 00:28:37.804901 ignition[759]: Ignition finished successfully Jul 11 00:28:37.807536 systemd[1]: Starting ignition-disks.service... Jul 11 00:28:37.813983 ignition[765]: Ignition 2.14.0 Jul 11 00:28:37.813993 ignition[765]: Stage: disks Jul 11 00:28:37.814089 ignition[765]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:28:37.814098 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:28:37.814910 ignition[765]: disks: disks passed Jul 11 00:28:37.814954 ignition[765]: Ignition finished successfully Jul 11 00:28:37.818631 systemd[1]: Finished ignition-disks.service. Jul 11 00:28:37.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.819368 systemd[1]: Reached target initrd-root-device.target. Jul 11 00:28:37.820452 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:28:37.821613 systemd[1]: Reached target local-fs.target. Jul 11 00:28:37.822563 systemd[1]: Reached target sysinit.target. Jul 11 00:28:37.823502 systemd[1]: Reached target basic.target. Jul 11 00:28:37.825266 systemd[1]: Starting systemd-fsck-root.service... Jul 11 00:28:37.835727 systemd-fsck[773]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 11 00:28:37.842519 systemd[1]: Finished systemd-fsck-root.service. Jul 11 00:28:37.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.845330 systemd[1]: Mounting sysroot.mount... Jul 11 00:28:37.855445 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 11 00:28:37.856076 systemd[1]: Mounted sysroot.mount. Jul 11 00:28:37.856771 systemd[1]: Reached target initrd-root-fs.target. Jul 11 00:28:37.858950 systemd[1]: Mounting sysroot-usr.mount... Jul 11 00:28:37.859867 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 11 00:28:37.859905 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 11 00:28:37.859929 systemd[1]: Reached target ignition-diskful.target. Jul 11 00:28:37.861857 systemd[1]: Mounted sysroot-usr.mount. Jul 11 00:28:37.868675 initrd-setup-root[783]: cut: /sysroot/etc/passwd: No such file or directory Jul 11 00:28:37.863842 systemd[1]: Starting initrd-setup-root.service... Jul 11 00:28:37.873436 initrd-setup-root[791]: cut: /sysroot/etc/group: No such file or directory Jul 11 00:28:37.877286 initrd-setup-root[799]: cut: /sysroot/etc/shadow: No such file or directory Jul 11 00:28:37.881582 initrd-setup-root[807]: cut: /sysroot/etc/gshadow: No such file or directory Jul 11 00:28:37.922636 systemd[1]: Finished initrd-setup-root.service. Jul 11 00:28:37.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.924097 systemd[1]: Starting ignition-mount.service... Jul 11 00:28:37.925275 systemd[1]: Starting sysroot-boot.service... Jul 11 00:28:37.930958 bash[824]: umount: /sysroot/usr/share/oem: not mounted. Jul 11 00:28:37.939902 ignition[825]: INFO : Ignition 2.14.0 Jul 11 00:28:37.939902 ignition[825]: INFO : Stage: mount Jul 11 00:28:37.942219 ignition[825]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:28:37.942219 ignition[825]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:28:37.942219 ignition[825]: INFO : mount: mount passed Jul 11 00:28:37.942219 ignition[825]: INFO : Ignition finished successfully Jul 11 00:28:37.944286 systemd[1]: Finished ignition-mount.service. Jul 11 00:28:37.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:37.954472 systemd[1]: Finished sysroot-boot.service. Jul 11 00:28:37.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:38.544857 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 11 00:28:38.550420 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (835) Jul 11 00:28:38.551807 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:28:38.551830 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:28:38.551840 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:28:38.555014 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 11 00:28:38.556444 systemd[1]: Starting ignition-files.service... Jul 11 00:28:38.570550 ignition[855]: INFO : Ignition 2.14.0 Jul 11 00:28:38.570550 ignition[855]: INFO : Stage: files Jul 11 00:28:38.571772 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:28:38.571772 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:28:38.571772 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Jul 11 00:28:38.583547 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 11 00:28:38.583547 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 11 00:28:38.586016 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 11 00:28:38.587082 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 11 00:28:38.587082 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 11 00:28:38.586921 unknown[855]: wrote ssh authorized keys file for user: core Jul 11 00:28:38.589887 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 11 00:28:38.589887 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 11 00:28:38.779929 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 11 00:28:38.970619 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 11 00:28:38.970619 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 11 00:28:38.973328 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Jul 11 00:28:39.025519 systemd-networkd[738]: eth0: Gained IPv6LL Jul 11 00:28:39.407923 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 11 00:28:40.193493 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 11 00:28:40.193493 ignition[855]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 11 00:28:40.196041 ignition[855]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 11 00:28:40.197387 ignition[855]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:28:40.248783 ignition[855]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:28:40.250010 ignition[855]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 11 00:28:40.250010 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:28:40.250010 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:28:40.250010 ignition[855]: INFO : files: files passed Jul 11 00:28:40.250010 ignition[855]: INFO : Ignition finished successfully Jul 11 00:28:40.258969 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 11 00:28:40.258991 kernel: audit: type=1130 audit(1752193720.252:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.251668 systemd[1]: Finished ignition-files.service. Jul 11 00:28:40.254206 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 11 00:28:40.257760 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 11 00:28:40.262651 initrd-setup-root-after-ignition[880]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 11 00:28:40.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.258544 systemd[1]: Starting ignition-quench.service... Jul 11 00:28:40.266904 initrd-setup-root-after-ignition[882]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 11 00:28:40.275641 kernel: audit: type=1130 audit(1752193720.262:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.275665 kernel: audit: type=1131 audit(1752193720.262:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.275683 kernel: audit: type=1130 audit(1752193720.269:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.261211 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 11 00:28:40.261297 systemd[1]: Finished ignition-quench.service. Jul 11 00:28:40.266394 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 11 00:28:40.269564 systemd[1]: Reached target ignition-complete.target. Jul 11 00:28:40.277019 systemd[1]: Starting initrd-parse-etc.service... Jul 11 00:28:40.290989 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 11 00:28:40.291098 systemd[1]: Finished initrd-parse-etc.service. Jul 11 00:28:40.297665 kernel: audit: type=1130 audit(1752193720.291:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.297687 kernel: audit: type=1131 audit(1752193720.292:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.292579 systemd[1]: Reached target initrd-fs.target. Jul 11 00:28:40.298263 systemd[1]: Reached target initrd.target. Jul 11 00:28:40.299471 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 11 00:28:40.300479 systemd[1]: Starting dracut-pre-pivot.service... Jul 11 00:28:40.313544 systemd[1]: Finished dracut-pre-pivot.service. Jul 11 00:28:40.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.315213 systemd[1]: Starting initrd-cleanup.service... Jul 11 00:28:40.317423 kernel: audit: type=1130 audit(1752193720.313:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.324669 systemd[1]: Stopped target nss-lookup.target. Jul 11 00:28:40.325426 systemd[1]: Stopped target remote-cryptsetup.target. Jul 11 00:28:40.326608 systemd[1]: Stopped target timers.target. Jul 11 00:28:40.327652 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 11 00:28:40.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.327764 systemd[1]: Stopped dracut-pre-pivot.service. Jul 11 00:28:40.332142 kernel: audit: type=1131 audit(1752193720.328:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.328856 systemd[1]: Stopped target initrd.target. Jul 11 00:28:40.331674 systemd[1]: Stopped target basic.target. Jul 11 00:28:40.332777 systemd[1]: Stopped target ignition-complete.target. Jul 11 00:28:40.334009 systemd[1]: Stopped target ignition-diskful.target. Jul 11 00:28:40.335158 systemd[1]: Stopped target initrd-root-device.target. Jul 11 00:28:40.336457 systemd[1]: Stopped target remote-fs.target. Jul 11 00:28:40.337634 systemd[1]: Stopped target remote-fs-pre.target. Jul 11 00:28:40.338931 systemd[1]: Stopped target sysinit.target. Jul 11 00:28:40.340037 systemd[1]: Stopped target local-fs.target. Jul 11 00:28:40.341058 systemd[1]: Stopped target local-fs-pre.target. Jul 11 00:28:40.342119 systemd[1]: Stopped target swap.target. Jul 11 00:28:40.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.343089 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 11 00:28:40.347903 kernel: audit: type=1131 audit(1752193720.343:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.343208 systemd[1]: Stopped dracut-pre-mount.service. Jul 11 00:28:40.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.344325 systemd[1]: Stopped target cryptsetup.target. Jul 11 00:28:40.352150 kernel: audit: type=1131 audit(1752193720.348:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.347221 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 11 00:28:40.347330 systemd[1]: Stopped dracut-initqueue.service. Jul 11 00:28:40.348633 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 11 00:28:40.348720 systemd[1]: Stopped ignition-fetch-offline.service. Jul 11 00:28:40.351781 systemd[1]: Stopped target paths.target. Jul 11 00:28:40.352767 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 11 00:28:40.356426 systemd[1]: Stopped systemd-ask-password-console.path. Jul 11 00:28:40.357530 systemd[1]: Stopped target slices.target. Jul 11 00:28:40.358691 systemd[1]: Stopped target sockets.target. Jul 11 00:28:40.359698 systemd[1]: iscsid.socket: Deactivated successfully. Jul 11 00:28:40.359776 systemd[1]: Closed iscsid.socket. Jul 11 00:28:40.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.360639 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 11 00:28:40.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.360738 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 11 00:28:40.361932 systemd[1]: ignition-files.service: Deactivated successfully. Jul 11 00:28:40.362018 systemd[1]: Stopped ignition-files.service. Jul 11 00:28:40.363819 systemd[1]: Stopping ignition-mount.service... Jul 11 00:28:40.365077 systemd[1]: Stopping iscsiuio.service... Jul 11 00:28:40.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.366526 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 11 00:28:40.366641 systemd[1]: Stopped kmod-static-nodes.service. Jul 11 00:28:40.368566 systemd[1]: Stopping sysroot-boot.service... Jul 11 00:28:40.371556 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 11 00:28:40.372452 ignition[895]: INFO : Ignition 2.14.0 Jul 11 00:28:40.372452 ignition[895]: INFO : Stage: umount Jul 11 00:28:40.373711 ignition[895]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:28:40.373711 ignition[895]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:28:40.373711 ignition[895]: INFO : umount: umount passed Jul 11 00:28:40.373711 ignition[895]: INFO : Ignition finished successfully Jul 11 00:28:40.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.373346 systemd[1]: Stopped systemd-udev-trigger.service. Jul 11 00:28:40.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.374596 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 11 00:28:40.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.374694 systemd[1]: Stopped dracut-pre-trigger.service. Jul 11 00:28:40.377598 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 11 00:28:40.377698 systemd[1]: Stopped iscsiuio.service. Jul 11 00:28:40.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.379175 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 11 00:28:40.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.379255 systemd[1]: Stopped ignition-mount.service. Jul 11 00:28:40.380347 systemd[1]: Stopped target network.target. Jul 11 00:28:40.381250 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 11 00:28:40.381287 systemd[1]: Closed iscsiuio.socket. Jul 11 00:28:40.382243 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 11 00:28:40.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.382281 systemd[1]: Stopped ignition-disks.service. Jul 11 00:28:40.383469 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 11 00:28:40.383507 systemd[1]: Stopped ignition-kargs.service. Jul 11 00:28:40.386532 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 11 00:28:40.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.386572 systemd[1]: Stopped ignition-setup.service. Jul 11 00:28:40.387253 systemd[1]: Stopping systemd-networkd.service... Jul 11 00:28:40.388530 systemd[1]: Stopping systemd-resolved.service... Jul 11 00:28:40.390779 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 11 00:28:40.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.391312 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 11 00:28:40.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.391407 systemd[1]: Finished initrd-cleanup.service. Jul 11 00:28:40.393449 systemd-networkd[738]: eth0: DHCPv6 lease lost Jul 11 00:28:40.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.394428 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 11 00:28:40.405000 audit: BPF prog-id=9 op=UNLOAD Jul 11 00:28:40.394534 systemd[1]: Stopped systemd-networkd.service. Jul 11 00:28:40.395649 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 11 00:28:40.395683 systemd[1]: Closed systemd-networkd.socket. Jul 11 00:28:40.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.397305 systemd[1]: Stopping network-cleanup.service... Jul 11 00:28:40.398147 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 11 00:28:40.398205 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 11 00:28:40.399536 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 11 00:28:40.399578 systemd[1]: Stopped systemd-sysctl.service. Jul 11 00:28:40.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.401368 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 11 00:28:40.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.415000 audit: BPF prog-id=6 op=UNLOAD Jul 11 00:28:40.401427 systemd[1]: Stopped systemd-modules-load.service. Jul 11 00:28:40.402995 systemd[1]: Stopping systemd-udevd.service... Jul 11 00:28:40.407057 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 11 00:28:40.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.407598 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 11 00:28:40.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.407693 systemd[1]: Stopped systemd-resolved.service. Jul 11 00:28:40.413516 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 11 00:28:40.413697 systemd[1]: Stopped systemd-udevd.service. Jul 11 00:28:40.414712 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 11 00:28:40.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.414811 systemd[1]: Stopped network-cleanup.service. Jul 11 00:28:40.415719 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 11 00:28:40.415755 systemd[1]: Closed systemd-udevd-control.socket. Jul 11 00:28:40.417442 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 11 00:28:40.417474 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 11 00:28:40.418566 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 11 00:28:40.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.418610 systemd[1]: Stopped dracut-pre-udev.service. Jul 11 00:28:40.419828 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 11 00:28:40.419867 systemd[1]: Stopped dracut-cmdline.service. Jul 11 00:28:40.421949 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 11 00:28:40.421991 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 11 00:28:40.424031 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 11 00:28:40.425140 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 11 00:28:40.425197 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 11 00:28:40.430353 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 11 00:28:40.430468 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 11 00:28:40.443085 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 11 00:28:40.443193 systemd[1]: Stopped sysroot-boot.service. Jul 11 00:28:40.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.444497 systemd[1]: Reached target initrd-switch-root.target. Jul 11 00:28:40.445431 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 11 00:28:40.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.445480 systemd[1]: Stopped initrd-setup-root.service. Jul 11 00:28:40.447244 systemd[1]: Starting initrd-switch-root.service... Jul 11 00:28:40.454046 systemd[1]: Switching root. Jul 11 00:28:40.473060 iscsid[743]: iscsid shutting down. Jul 11 00:28:40.473588 systemd-journald[290]: Received SIGTERM from PID 1 (n/a). Jul 11 00:28:40.473630 systemd-journald[290]: Journal stopped Jul 11 00:28:42.425528 kernel: SELinux: Class mctp_socket not defined in policy. Jul 11 00:28:42.427414 kernel: SELinux: Class anon_inode not defined in policy. Jul 11 00:28:42.427432 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 11 00:28:42.427442 kernel: SELinux: policy capability network_peer_controls=1 Jul 11 00:28:42.427451 kernel: SELinux: policy capability open_perms=1 Jul 11 00:28:42.427464 kernel: SELinux: policy capability extended_socket_class=1 Jul 11 00:28:42.427474 kernel: SELinux: policy capability always_check_network=0 Jul 11 00:28:42.427483 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 11 00:28:42.427493 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 11 00:28:42.427573 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 11 00:28:42.427591 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 11 00:28:42.427603 systemd[1]: Successfully loaded SELinux policy in 35.671ms. Jul 11 00:28:42.427620 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.666ms. Jul 11 00:28:42.427633 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:28:42.427644 systemd[1]: Detected virtualization kvm. Jul 11 00:28:42.427654 systemd[1]: Detected architecture arm64. Jul 11 00:28:42.427665 systemd[1]: Detected first boot. Jul 11 00:28:42.427678 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:28:42.427689 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 11 00:28:42.427699 systemd[1]: Populated /etc with preset unit settings. Jul 11 00:28:42.427710 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:28:42.427722 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:28:42.427734 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:28:42.427745 systemd[1]: iscsid.service: Deactivated successfully. Jul 11 00:28:42.427757 systemd[1]: Stopped iscsid.service. Jul 11 00:28:42.427767 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 11 00:28:42.427784 systemd[1]: Stopped initrd-switch-root.service. Jul 11 00:28:42.427797 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 11 00:28:42.427807 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 11 00:28:42.427822 systemd[1]: Created slice system-addon\x2drun.slice. Jul 11 00:28:42.427833 systemd[1]: Created slice system-getty.slice. Jul 11 00:28:42.427843 systemd[1]: Created slice system-modprobe.slice. Jul 11 00:28:42.427853 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 11 00:28:42.427865 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 11 00:28:42.427875 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 11 00:28:42.427885 systemd[1]: Created slice user.slice. Jul 11 00:28:42.427895 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:28:42.427906 systemd[1]: Started systemd-ask-password-wall.path. Jul 11 00:28:42.427917 systemd[1]: Set up automount boot.automount. Jul 11 00:28:42.427928 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 11 00:28:42.427938 systemd[1]: Stopped target initrd-switch-root.target. Jul 11 00:28:42.427949 systemd[1]: Stopped target initrd-fs.target. Jul 11 00:28:42.427959 systemd[1]: Stopped target initrd-root-fs.target. Jul 11 00:28:42.427969 systemd[1]: Reached target integritysetup.target. Jul 11 00:28:42.427979 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:28:42.427990 systemd[1]: Reached target remote-fs.target. Jul 11 00:28:42.428001 systemd[1]: Reached target slices.target. Jul 11 00:28:42.428011 systemd[1]: Reached target swap.target. Jul 11 00:28:42.428021 systemd[1]: Reached target torcx.target. Jul 11 00:28:42.428032 systemd[1]: Reached target veritysetup.target. Jul 11 00:28:42.428042 systemd[1]: Listening on systemd-coredump.socket. Jul 11 00:28:42.428052 systemd[1]: Listening on systemd-initctl.socket. Jul 11 00:28:42.428062 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:28:42.428072 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:28:42.428083 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:28:42.428094 systemd[1]: Listening on systemd-userdbd.socket. Jul 11 00:28:42.428105 systemd[1]: Mounting dev-hugepages.mount... Jul 11 00:28:42.428115 systemd[1]: Mounting dev-mqueue.mount... Jul 11 00:28:42.428125 systemd[1]: Mounting media.mount... Jul 11 00:28:42.428136 systemd[1]: Mounting sys-kernel-debug.mount... Jul 11 00:28:42.428146 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 11 00:28:42.428157 systemd[1]: Mounting tmp.mount... Jul 11 00:28:42.428167 systemd[1]: Starting flatcar-tmpfiles.service... Jul 11 00:28:42.428177 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:28:42.428188 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:28:42.428200 systemd[1]: Starting modprobe@configfs.service... Jul 11 00:28:42.428211 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:28:42.428221 systemd[1]: Starting modprobe@drm.service... Jul 11 00:28:42.428232 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:28:42.428242 systemd[1]: Starting modprobe@fuse.service... Jul 11 00:28:42.428252 systemd[1]: Starting modprobe@loop.service... Jul 11 00:28:42.428263 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 11 00:28:42.428273 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 11 00:28:42.428283 systemd[1]: Stopped systemd-fsck-root.service. Jul 11 00:28:42.428295 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 11 00:28:42.428306 systemd[1]: Stopped systemd-fsck-usr.service. Jul 11 00:28:42.428316 systemd[1]: Stopped systemd-journald.service. Jul 11 00:28:42.428326 kernel: loop: module loaded Jul 11 00:28:42.428337 kernel: fuse: init (API version 7.34) Jul 11 00:28:42.428348 systemd[1]: Starting systemd-journald.service... Jul 11 00:28:42.428359 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:28:42.428369 systemd[1]: Starting systemd-network-generator.service... Jul 11 00:28:42.428379 systemd[1]: Starting systemd-remount-fs.service... Jul 11 00:28:42.428390 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:28:42.428442 systemd[1]: verity-setup.service: Deactivated successfully. Jul 11 00:28:42.428456 systemd[1]: Stopped verity-setup.service. Jul 11 00:28:42.428466 systemd[1]: Mounted dev-hugepages.mount. Jul 11 00:28:42.428476 systemd[1]: Mounted dev-mqueue.mount. Jul 11 00:28:42.428486 systemd[1]: Mounted media.mount. Jul 11 00:28:42.428496 systemd[1]: Mounted sys-kernel-debug.mount. Jul 11 00:28:42.428506 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 11 00:28:42.428518 systemd-journald[989]: Journal started Jul 11 00:28:42.428566 systemd-journald[989]: Runtime Journal (/run/log/journal/c2f1069f1d9641378957198342fdc928) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:28:40.535000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 11 00:28:40.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:28:40.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:28:40.617000 audit: BPF prog-id=10 op=LOAD Jul 11 00:28:40.617000 audit: BPF prog-id=10 op=UNLOAD Jul 11 00:28:40.617000 audit: BPF prog-id=11 op=LOAD Jul 11 00:28:40.617000 audit: BPF prog-id=11 op=UNLOAD Jul 11 00:28:40.655000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 11 00:28:40.655000 audit[928]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:40.655000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:28:40.656000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 11 00:28:40.656000 audit[928]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:40.656000 audit: CWD cwd="/" Jul 11 00:28:40.656000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:28:40.656000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:28:40.656000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:28:42.323000 audit: BPF prog-id=12 op=LOAD Jul 11 00:28:42.323000 audit: BPF prog-id=3 op=UNLOAD Jul 11 00:28:42.323000 audit: BPF prog-id=13 op=LOAD Jul 11 00:28:42.323000 audit: BPF prog-id=14 op=LOAD Jul 11 00:28:42.323000 audit: BPF prog-id=4 op=UNLOAD Jul 11 00:28:42.323000 audit: BPF prog-id=5 op=UNLOAD Jul 11 00:28:42.324000 audit: BPF prog-id=15 op=LOAD Jul 11 00:28:42.324000 audit: BPF prog-id=12 op=UNLOAD Jul 11 00:28:42.324000 audit: BPF prog-id=16 op=LOAD Jul 11 00:28:42.324000 audit: BPF prog-id=17 op=LOAD Jul 11 00:28:42.324000 audit: BPF prog-id=13 op=UNLOAD Jul 11 00:28:42.324000 audit: BPF prog-id=14 op=UNLOAD Jul 11 00:28:42.325000 audit: BPF prog-id=18 op=LOAD Jul 11 00:28:42.325000 audit: BPF prog-id=15 op=UNLOAD Jul 11 00:28:42.325000 audit: BPF prog-id=19 op=LOAD Jul 11 00:28:42.325000 audit: BPF prog-id=20 op=LOAD Jul 11 00:28:42.325000 audit: BPF prog-id=16 op=UNLOAD Jul 11 00:28:42.325000 audit: BPF prog-id=17 op=UNLOAD Jul 11 00:28:42.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.333000 audit: BPF prog-id=18 op=UNLOAD Jul 11 00:28:42.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.407000 audit: BPF prog-id=21 op=LOAD Jul 11 00:28:42.407000 audit: BPF prog-id=22 op=LOAD Jul 11 00:28:42.407000 audit: BPF prog-id=23 op=LOAD Jul 11 00:28:42.407000 audit: BPF prog-id=19 op=UNLOAD Jul 11 00:28:42.407000 audit: BPF prog-id=20 op=UNLOAD Jul 11 00:28:42.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.424000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 11 00:28:42.424000 audit[989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffcb778290 a2=4000 a3=1 items=0 ppid=1 pid=989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:42.424000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 11 00:28:40.654133 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:28:42.322674 systemd[1]: Queued start job for default target multi-user.target. Jul 11 00:28:40.654685 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:28:42.322686 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 11 00:28:40.654703 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:28:42.326492 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 11 00:28:40.654736 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 11 00:28:40.654745 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 11 00:28:40.654776 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 11 00:28:40.654788 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 11 00:28:40.655005 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 11 00:28:40.655042 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:28:42.430419 systemd[1]: Started systemd-journald.service. Jul 11 00:28:42.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:40.655054 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:28:40.655714 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 11 00:28:40.655750 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 11 00:28:40.655769 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 11 00:28:42.430736 systemd[1]: Mounted tmp.mount. Jul 11 00:28:40.655783 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 11 00:28:40.655811 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 11 00:28:40.655825 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:40Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 11 00:28:42.079068 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:42Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:28:42.079318 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:42Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:28:42.079429 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:42Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:28:42.079595 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:42Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:28:42.079643 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:42Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 11 00:28:42.079700 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:28:42Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 11 00:28:42.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.431648 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:28:42.432474 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 11 00:28:42.432620 systemd[1]: Finished modprobe@configfs.service. Jul 11 00:28:42.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.433461 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:28:42.433603 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:28:42.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.434618 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:28:42.434787 systemd[1]: Finished modprobe@drm.service. Jul 11 00:28:42.435576 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:28:42.436533 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:28:42.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.437358 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 11 00:28:42.437539 systemd[1]: Finished modprobe@fuse.service. Jul 11 00:28:42.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.438320 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:28:42.438501 systemd[1]: Finished modprobe@loop.service. Jul 11 00:28:42.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.439333 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:28:42.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.440218 systemd[1]: Finished systemd-network-generator.service. Jul 11 00:28:42.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.441150 systemd[1]: Finished systemd-remount-fs.service. Jul 11 00:28:42.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.442315 systemd[1]: Reached target network-pre.target. Jul 11 00:28:42.443955 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 11 00:28:42.445725 systemd[1]: Mounting sys-kernel-config.mount... Jul 11 00:28:42.446284 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 11 00:28:42.447826 systemd[1]: Starting systemd-hwdb-update.service... Jul 11 00:28:42.449511 systemd[1]: Starting systemd-journal-flush.service... Jul 11 00:28:42.450165 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:28:42.451135 systemd[1]: Starting systemd-random-seed.service... Jul 11 00:28:42.451786 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:28:42.452830 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:28:42.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.455548 systemd[1]: Finished flatcar-tmpfiles.service. Jul 11 00:28:42.456307 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 11 00:28:42.457147 systemd[1]: Mounted sys-kernel-config.mount. Jul 11 00:28:42.458978 systemd[1]: Starting systemd-sysusers.service... Jul 11 00:28:42.459251 systemd-journald[989]: Time spent on flushing to /var/log/journal/c2f1069f1d9641378957198342fdc928 is 13.099ms for 1000 entries. Jul 11 00:28:42.459251 systemd-journald[989]: System Journal (/var/log/journal/c2f1069f1d9641378957198342fdc928) is 8.0M, max 195.6M, 187.6M free. Jul 11 00:28:42.481910 systemd-journald[989]: Received client request to flush runtime journal. Jul 11 00:28:42.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.470691 systemd[1]: Finished systemd-random-seed.service. Jul 11 00:28:42.471633 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:28:42.482259 udevadm[1028]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 11 00:28:42.472443 systemd[1]: Reached target first-boot-complete.target. Jul 11 00:28:42.474080 systemd[1]: Starting systemd-udev-settle.service... Jul 11 00:28:42.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.485076 systemd[1]: Finished systemd-journal-flush.service. Jul 11 00:28:42.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.486970 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:28:42.492215 systemd[1]: Finished systemd-sysusers.service. Jul 11 00:28:42.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.830965 systemd[1]: Finished systemd-hwdb-update.service. Jul 11 00:28:42.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.831000 audit: BPF prog-id=24 op=LOAD Jul 11 00:28:42.831000 audit: BPF prog-id=25 op=LOAD Jul 11 00:28:42.831000 audit: BPF prog-id=7 op=UNLOAD Jul 11 00:28:42.831000 audit: BPF prog-id=8 op=UNLOAD Jul 11 00:28:42.832976 systemd[1]: Starting systemd-udevd.service... Jul 11 00:28:42.849534 systemd-udevd[1030]: Using default interface naming scheme 'v252'. Jul 11 00:28:42.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.865000 audit: BPF prog-id=26 op=LOAD Jul 11 00:28:42.861426 systemd[1]: Started systemd-udevd.service. Jul 11 00:28:42.866296 systemd[1]: Starting systemd-networkd.service... Jul 11 00:28:42.875000 audit: BPF prog-id=27 op=LOAD Jul 11 00:28:42.875000 audit: BPF prog-id=28 op=LOAD Jul 11 00:28:42.875000 audit: BPF prog-id=29 op=LOAD Jul 11 00:28:42.876486 systemd[1]: Starting systemd-userdbd.service... Jul 11 00:28:42.885602 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 11 00:28:42.907494 systemd[1]: Started systemd-userdbd.service. Jul 11 00:28:42.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.920448 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:28:42.968735 systemd[1]: Finished systemd-udev-settle.service. Jul 11 00:28:42.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.970564 systemd[1]: Starting lvm2-activation-early.service... Jul 11 00:28:42.972086 systemd-networkd[1045]: lo: Link UP Jul 11 00:28:42.972095 systemd-networkd[1045]: lo: Gained carrier Jul 11 00:28:42.972571 systemd-networkd[1045]: Enumeration completed Jul 11 00:28:42.972658 systemd[1]: Started systemd-networkd.service. Jul 11 00:28:42.972678 systemd-networkd[1045]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:28:42.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:42.975730 systemd-networkd[1045]: eth0: Link UP Jul 11 00:28:42.975739 systemd-networkd[1045]: eth0: Gained carrier Jul 11 00:28:42.987733 lvm[1063]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:28:42.994505 systemd-networkd[1045]: eth0: DHCPv4 address 10.0.0.65/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:28:43.014160 systemd[1]: Finished lvm2-activation-early.service. Jul 11 00:28:43.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.014943 systemd[1]: Reached target cryptsetup.target. Jul 11 00:28:43.016606 systemd[1]: Starting lvm2-activation.service... Jul 11 00:28:43.019922 lvm[1064]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:28:43.043143 systemd[1]: Finished lvm2-activation.service. Jul 11 00:28:43.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.043900 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:28:43.044522 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 11 00:28:43.044551 systemd[1]: Reached target local-fs.target. Jul 11 00:28:43.045110 systemd[1]: Reached target machines.target. Jul 11 00:28:43.046805 systemd[1]: Starting ldconfig.service... Jul 11 00:28:43.047734 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.047796 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.048860 systemd[1]: Starting systemd-boot-update.service... Jul 11 00:28:43.050597 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 11 00:28:43.052394 systemd[1]: Starting systemd-machine-id-commit.service... Jul 11 00:28:43.054122 systemd[1]: Starting systemd-sysext.service... Jul 11 00:28:43.055436 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1066 (bootctl) Jul 11 00:28:43.056621 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 11 00:28:43.065793 systemd[1]: Unmounting usr-share-oem.mount... Jul 11 00:28:43.068842 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 11 00:28:43.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.073797 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 11 00:28:43.073991 systemd[1]: Unmounted usr-share-oem.mount. Jul 11 00:28:43.085422 kernel: loop0: detected capacity change from 0 to 203944 Jul 11 00:28:43.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.125534 systemd[1]: Finished systemd-machine-id-commit.service. Jul 11 00:28:43.135442 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 11 00:28:43.136023 systemd-fsck[1077]: fsck.fat 4.2 (2021-01-31) Jul 11 00:28:43.136023 systemd-fsck[1077]: /dev/vda1: 236 files, 117310/258078 clusters Jul 11 00:28:43.137637 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 11 00:28:43.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.157443 kernel: loop1: detected capacity change from 0 to 203944 Jul 11 00:28:43.163486 (sd-sysext)[1081]: Using extensions 'kubernetes'. Jul 11 00:28:43.163836 (sd-sysext)[1081]: Merged extensions into '/usr'. Jul 11 00:28:43.179183 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.180503 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:28:43.182568 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:28:43.184530 systemd[1]: Starting modprobe@loop.service... Jul 11 00:28:43.185494 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.185636 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.186489 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:28:43.186629 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:28:43.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.188011 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:28:43.188130 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:28:43.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.189633 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:28:43.189745 systemd[1]: Finished modprobe@loop.service. Jul 11 00:28:43.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.191099 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:28:43.191201 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.239672 ldconfig[1065]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 11 00:28:43.243220 systemd[1]: Finished ldconfig.service. Jul 11 00:28:43.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.423575 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 11 00:28:43.425287 systemd[1]: Mounting boot.mount... Jul 11 00:28:43.427118 systemd[1]: Mounting usr-share-oem.mount... Jul 11 00:28:43.431587 systemd[1]: Mounted usr-share-oem.mount. Jul 11 00:28:43.433927 systemd[1]: Finished systemd-sysext.service. Jul 11 00:28:43.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.434852 systemd[1]: Mounted boot.mount. Jul 11 00:28:43.437285 systemd[1]: Starting ensure-sysext.service... Jul 11 00:28:43.439188 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 11 00:28:43.443299 systemd[1]: Reloading. Jul 11 00:28:43.453093 systemd-tmpfiles[1089]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 11 00:28:43.455620 systemd-tmpfiles[1089]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 11 00:28:43.461754 systemd-tmpfiles[1089]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 11 00:28:43.484581 /usr/lib/systemd/system-generators/torcx-generator[1109]: time="2025-07-11T00:28:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:28:43.484918 /usr/lib/systemd/system-generators/torcx-generator[1109]: time="2025-07-11T00:28:43Z" level=info msg="torcx already run" Jul 11 00:28:43.544794 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:28:43.544814 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:28:43.560589 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:28:43.603000 audit: BPF prog-id=30 op=LOAD Jul 11 00:28:43.603000 audit: BPF prog-id=31 op=LOAD Jul 11 00:28:43.603000 audit: BPF prog-id=24 op=UNLOAD Jul 11 00:28:43.603000 audit: BPF prog-id=25 op=UNLOAD Jul 11 00:28:43.603000 audit: BPF prog-id=32 op=LOAD Jul 11 00:28:43.603000 audit: BPF prog-id=27 op=UNLOAD Jul 11 00:28:43.603000 audit: BPF prog-id=33 op=LOAD Jul 11 00:28:43.603000 audit: BPF prog-id=34 op=LOAD Jul 11 00:28:43.603000 audit: BPF prog-id=28 op=UNLOAD Jul 11 00:28:43.603000 audit: BPF prog-id=29 op=UNLOAD Jul 11 00:28:43.604000 audit: BPF prog-id=35 op=LOAD Jul 11 00:28:43.604000 audit: BPF prog-id=21 op=UNLOAD Jul 11 00:28:43.604000 audit: BPF prog-id=36 op=LOAD Jul 11 00:28:43.604000 audit: BPF prog-id=37 op=LOAD Jul 11 00:28:43.604000 audit: BPF prog-id=22 op=UNLOAD Jul 11 00:28:43.604000 audit: BPF prog-id=23 op=UNLOAD Jul 11 00:28:43.605000 audit: BPF prog-id=38 op=LOAD Jul 11 00:28:43.605000 audit: BPF prog-id=26 op=UNLOAD Jul 11 00:28:43.609675 systemd[1]: Finished systemd-boot-update.service. Jul 11 00:28:43.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.611778 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 11 00:28:43.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.615387 systemd[1]: Starting audit-rules.service... Jul 11 00:28:43.617473 systemd[1]: Starting clean-ca-certificates.service... Jul 11 00:28:43.619745 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 11 00:28:43.621000 audit: BPF prog-id=39 op=LOAD Jul 11 00:28:43.622269 systemd[1]: Starting systemd-resolved.service... Jul 11 00:28:43.626000 audit: BPF prog-id=40 op=LOAD Jul 11 00:28:43.628390 systemd[1]: Starting systemd-timesyncd.service... Jul 11 00:28:43.631722 systemd[1]: Starting systemd-update-utmp.service... Jul 11 00:28:43.636059 systemd[1]: Finished clean-ca-certificates.service. Jul 11 00:28:43.635000 audit[1159]: SYSTEM_BOOT pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.639208 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.640540 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:28:43.642679 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:28:43.644801 systemd[1]: Starting modprobe@loop.service... Jul 11 00:28:43.645568 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.645744 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.645905 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:28:43.647032 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:28:43.647158 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:28:43.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.648545 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 11 00:28:43.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.650136 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:28:43.650245 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:28:43.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.651699 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:28:43.651821 systemd[1]: Finished modprobe@loop.service. Jul 11 00:28:43.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:43.658000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 11 00:28:43.658000 audit[1171]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffc85f460 a2=420 a3=0 items=0 ppid=1147 pid=1171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:43.658000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 11 00:28:43.660736 augenrules[1171]: No rules Jul 11 00:28:43.654929 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.660237 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:28:43.661944 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:28:43.663626 systemd[1]: Starting modprobe@loop.service... Jul 11 00:28:43.664231 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.664356 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.665792 systemd[1]: Starting systemd-update-done.service... Jul 11 00:28:43.666490 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:28:43.667554 systemd[1]: Finished audit-rules.service. Jul 11 00:28:43.668588 systemd[1]: Finished systemd-update-utmp.service. Jul 11 00:28:43.669651 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:28:43.669784 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:28:43.670901 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:28:43.671018 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:28:43.672109 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:28:43.672227 systemd[1]: Finished modprobe@loop.service. Jul 11 00:28:43.673271 systemd[1]: Finished systemd-update-done.service. Jul 11 00:28:43.675466 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:28:43.675561 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.677844 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.679137 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:28:43.681185 systemd[1]: Starting modprobe@drm.service... Jul 11 00:28:43.683087 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:28:43.685143 systemd[1]: Starting modprobe@loop.service... Jul 11 00:28:43.686017 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.686166 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.687470 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 11 00:28:43.688603 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:28:43.689585 systemd[1]: Started systemd-timesyncd.service. Jul 11 00:28:43.690244 systemd-timesyncd[1153]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 11 00:28:43.690517 systemd-timesyncd[1153]: Initial clock synchronization to Fri 2025-07-11 00:28:43.524975 UTC. Jul 11 00:28:43.691168 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:28:43.691292 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:28:43.692577 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:28:43.692694 systemd[1]: Finished modprobe@drm.service. Jul 11 00:28:43.693874 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:28:43.693990 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:28:43.695224 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:28:43.695337 systemd[1]: Finished modprobe@loop.service. Jul 11 00:28:43.696776 systemd[1]: Reached target time-set.target. Jul 11 00:28:43.697620 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:28:43.697661 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.697951 systemd[1]: Finished ensure-sysext.service. Jul 11 00:28:43.700358 systemd-resolved[1152]: Positive Trust Anchors: Jul 11 00:28:43.700367 systemd-resolved[1152]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:28:43.700393 systemd-resolved[1152]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:28:43.708685 systemd-resolved[1152]: Defaulting to hostname 'linux'. Jul 11 00:28:43.711774 systemd[1]: Started systemd-resolved.service. Jul 11 00:28:43.712686 systemd[1]: Reached target network.target. Jul 11 00:28:43.713473 systemd[1]: Reached target nss-lookup.target. Jul 11 00:28:43.714259 systemd[1]: Reached target sysinit.target. Jul 11 00:28:43.715135 systemd[1]: Started motdgen.path. Jul 11 00:28:43.715889 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 11 00:28:43.717195 systemd[1]: Started logrotate.timer. Jul 11 00:28:43.718048 systemd[1]: Started mdadm.timer. Jul 11 00:28:43.718764 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 11 00:28:43.719615 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 11 00:28:43.719647 systemd[1]: Reached target paths.target. Jul 11 00:28:43.720354 systemd[1]: Reached target timers.target. Jul 11 00:28:43.721488 systemd[1]: Listening on dbus.socket. Jul 11 00:28:43.723171 systemd[1]: Starting docker.socket... Jul 11 00:28:43.726355 systemd[1]: Listening on sshd.socket. Jul 11 00:28:43.727265 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.727740 systemd[1]: Listening on docker.socket. Jul 11 00:28:43.728611 systemd[1]: Reached target sockets.target. Jul 11 00:28:43.729383 systemd[1]: Reached target basic.target. Jul 11 00:28:43.730212 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.730247 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:28:43.731244 systemd[1]: Starting containerd.service... Jul 11 00:28:43.733019 systemd[1]: Starting dbus.service... Jul 11 00:28:43.734753 systemd[1]: Starting enable-oem-cloudinit.service... Jul 11 00:28:43.736851 systemd[1]: Starting extend-filesystems.service... Jul 11 00:28:43.737724 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 11 00:28:43.739185 systemd[1]: Starting motdgen.service... Jul 11 00:28:43.741232 systemd[1]: Starting prepare-helm.service... Jul 11 00:28:43.743504 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 11 00:28:43.745576 systemd[1]: Starting sshd-keygen.service... Jul 11 00:28:43.748995 systemd[1]: Starting systemd-logind.service... Jul 11 00:28:43.750739 jq[1190]: false Jul 11 00:28:43.750006 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:28:43.750101 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 11 00:28:43.750628 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 11 00:28:43.752558 systemd[1]: Starting update-engine.service... Jul 11 00:28:43.754626 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 11 00:28:43.757064 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 11 00:28:43.757162 jq[1205]: true Jul 11 00:28:43.757232 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 11 00:28:43.758343 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 11 00:28:43.758521 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 11 00:28:43.770804 extend-filesystems[1191]: Found loop1 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda1 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda2 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda3 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found usr Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda4 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda6 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda7 Jul 11 00:28:43.770804 extend-filesystems[1191]: Found vda9 Jul 11 00:28:43.770804 extend-filesystems[1191]: Checking size of /dev/vda9 Jul 11 00:28:43.788606 tar[1208]: linux-arm64/helm Jul 11 00:28:43.788926 jq[1209]: true Jul 11 00:28:43.770916 systemd[1]: motdgen.service: Deactivated successfully. Jul 11 00:28:43.771111 systemd[1]: Finished motdgen.service. Jul 11 00:28:43.795925 dbus-daemon[1189]: [system] SELinux support is enabled Jul 11 00:28:43.796133 systemd[1]: Started dbus.service. Jul 11 00:28:43.798883 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 11 00:28:43.798908 systemd[1]: Reached target system-config.target. Jul 11 00:28:43.799888 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 11 00:28:43.803844 extend-filesystems[1191]: Resized partition /dev/vda9 Jul 11 00:28:43.799912 systemd[1]: Reached target user-config.target. Jul 11 00:28:43.809350 extend-filesystems[1239]: resize2fs 1.46.5 (30-Dec-2021) Jul 11 00:28:43.823187 systemd-logind[1201]: Watching system buttons on /dev/input/event0 (Power Button) Jul 11 00:28:43.823663 systemd-logind[1201]: New seat seat0. Jul 11 00:28:43.827586 systemd[1]: Started systemd-logind.service. Jul 11 00:28:43.834568 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 11 00:28:43.868441 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 11 00:28:43.872433 update_engine[1204]: I0711 00:28:43.871178 1204 main.cc:92] Flatcar Update Engine starting Jul 11 00:28:43.882933 extend-filesystems[1239]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 11 00:28:43.882933 extend-filesystems[1239]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 11 00:28:43.882933 extend-filesystems[1239]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 11 00:28:43.888015 extend-filesystems[1191]: Resized filesystem in /dev/vda9 Jul 11 00:28:43.889205 env[1210]: time="2025-07-11T00:28:43.888453600Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 11 00:28:43.889874 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 11 00:28:43.890037 systemd[1]: Finished extend-filesystems.service. Jul 11 00:28:43.891717 bash[1240]: Updated "/home/core/.ssh/authorized_keys" Jul 11 00:28:43.891842 update_engine[1204]: I0711 00:28:43.891606 1204 update_check_scheduler.cc:74] Next update check in 3m41s Jul 11 00:28:43.891609 systemd[1]: Started update-engine.service. Jul 11 00:28:43.892851 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 11 00:28:43.895975 systemd[1]: Started locksmithd.service. Jul 11 00:28:43.914558 env[1210]: time="2025-07-11T00:28:43.914511600Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 11 00:28:43.914683 env[1210]: time="2025-07-11T00:28:43.914673560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:28:43.916217 env[1210]: time="2025-07-11T00:28:43.915977360Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:28:43.916217 env[1210]: time="2025-07-11T00:28:43.916023840Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916496720Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916520160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916533480Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916543600Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916623200Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916843720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916966760Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.916981920Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.917035240Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 11 00:28:43.917198 env[1210]: time="2025-07-11T00:28:43.917047040Z" level=info msg="metadata content store policy set" policy=shared Jul 11 00:28:43.950948 env[1210]: time="2025-07-11T00:28:43.950809000Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 11 00:28:43.950948 env[1210]: time="2025-07-11T00:28:43.950857480Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 11 00:28:43.950948 env[1210]: time="2025-07-11T00:28:43.950872760Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 11 00:28:43.951260 env[1210]: time="2025-07-11T00:28:43.951133320Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.951432 env[1210]: time="2025-07-11T00:28:43.951310280Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.951432 env[1210]: time="2025-07-11T00:28:43.951337000Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.951432 env[1210]: time="2025-07-11T00:28:43.951351920Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.952311 env[1210]: time="2025-07-11T00:28:43.951969480Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.952311 env[1210]: time="2025-07-11T00:28:43.952095840Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.952311 env[1210]: time="2025-07-11T00:28:43.952113040Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.952311 env[1210]: time="2025-07-11T00:28:43.952127000Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.952311 env[1210]: time="2025-07-11T00:28:43.952139680Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 11 00:28:43.952311 env[1210]: time="2025-07-11T00:28:43.952278120Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.952804440Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953038360Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953063360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953075960Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953233960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953248120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953260200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.953307 env[1210]: time="2025-07-11T00:28:43.953271280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953283160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953609040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953623400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953634480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953648120Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953777800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953796600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953809120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953820720Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953837800Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953848480Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953864480Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 11 00:28:43.955981 env[1210]: time="2025-07-11T00:28:43.953897360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 11 00:28:43.955273 systemd[1]: Started containerd.service. Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.954094200Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.954147200Z" level=info msg="Connect containerd service" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.954176040Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.954808680Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.954935240Z" level=info msg="Start subscribing containerd event" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.954993920Z" level=info msg="Start recovering state" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955065280Z" level=info msg="Start event monitor" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955080560Z" level=info msg="Start snapshots syncer" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955092600Z" level=info msg="Start cni network conf syncer for default" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955100560Z" level=info msg="Start streaming server" Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955109120Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955143840Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 11 00:28:43.956351 env[1210]: time="2025-07-11T00:28:43.955189400Z" level=info msg="containerd successfully booted in 0.085455s" Jul 11 00:28:43.968518 locksmithd[1245]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 11 00:28:44.195015 tar[1208]: linux-arm64/LICENSE Jul 11 00:28:44.195147 tar[1208]: linux-arm64/README.md Jul 11 00:28:44.199506 systemd[1]: Finished prepare-helm.service. Jul 11 00:28:44.336520 systemd-networkd[1045]: eth0: Gained IPv6LL Jul 11 00:28:44.338173 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 11 00:28:44.339475 systemd[1]: Reached target network-online.target. Jul 11 00:28:44.342072 systemd[1]: Starting kubelet.service... Jul 11 00:28:44.976686 systemd[1]: Started kubelet.service. Jul 11 00:28:45.233875 sshd_keygen[1206]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 11 00:28:45.252574 systemd[1]: Finished sshd-keygen.service. Jul 11 00:28:45.254751 systemd[1]: Starting issuegen.service... Jul 11 00:28:45.259460 systemd[1]: issuegen.service: Deactivated successfully. Jul 11 00:28:45.259615 systemd[1]: Finished issuegen.service. Jul 11 00:28:45.261615 systemd[1]: Starting systemd-user-sessions.service... Jul 11 00:28:45.267612 systemd[1]: Finished systemd-user-sessions.service. Jul 11 00:28:45.269683 systemd[1]: Started getty@tty1.service. Jul 11 00:28:45.271487 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 11 00:28:45.272387 systemd[1]: Reached target getty.target. Jul 11 00:28:45.273163 systemd[1]: Reached target multi-user.target. Jul 11 00:28:45.274951 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 11 00:28:45.281525 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 11 00:28:45.281678 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 11 00:28:45.282789 systemd[1]: Startup finished in 610ms (kernel) + 4.926s (initrd) + 4.784s (userspace) = 10.321s. Jul 11 00:28:45.470122 kubelet[1258]: E0711 00:28:45.470075 1258 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:28:45.472022 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:28:45.472154 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:28:48.305569 systemd[1]: Created slice system-sshd.slice. Jul 11 00:28:48.306872 systemd[1]: Started sshd@0-10.0.0.65:22-10.0.0.1:35608.service. Jul 11 00:28:48.359220 sshd[1280]: Accepted publickey for core from 10.0.0.1 port 35608 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:48.363411 sshd[1280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.372574 systemd-logind[1201]: New session 1 of user core. Jul 11 00:28:48.373490 systemd[1]: Created slice user-500.slice. Jul 11 00:28:48.374713 systemd[1]: Starting user-runtime-dir@500.service... Jul 11 00:28:48.383115 systemd[1]: Finished user-runtime-dir@500.service. Jul 11 00:28:48.384523 systemd[1]: Starting user@500.service... Jul 11 00:28:48.387459 (systemd)[1283]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.449097 systemd[1283]: Queued start job for default target default.target. Jul 11 00:28:48.449625 systemd[1283]: Reached target paths.target. Jul 11 00:28:48.449658 systemd[1283]: Reached target sockets.target. Jul 11 00:28:48.449669 systemd[1283]: Reached target timers.target. Jul 11 00:28:48.449679 systemd[1283]: Reached target basic.target. Jul 11 00:28:48.449720 systemd[1283]: Reached target default.target. Jul 11 00:28:48.449744 systemd[1283]: Startup finished in 56ms. Jul 11 00:28:48.449927 systemd[1]: Started user@500.service. Jul 11 00:28:48.450937 systemd[1]: Started session-1.scope. Jul 11 00:28:48.500895 systemd[1]: Started sshd@1-10.0.0.65:22-10.0.0.1:35620.service. Jul 11 00:28:48.542359 sshd[1292]: Accepted publickey for core from 10.0.0.1 port 35620 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:48.543863 sshd[1292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.547266 systemd-logind[1201]: New session 2 of user core. Jul 11 00:28:48.548420 systemd[1]: Started session-2.scope. Jul 11 00:28:48.602455 sshd[1292]: pam_unix(sshd:session): session closed for user core Jul 11 00:28:48.605851 systemd[1]: Started sshd@2-10.0.0.65:22-10.0.0.1:35622.service. Jul 11 00:28:48.606281 systemd[1]: sshd@1-10.0.0.65:22-10.0.0.1:35620.service: Deactivated successfully. Jul 11 00:28:48.606944 systemd[1]: session-2.scope: Deactivated successfully. Jul 11 00:28:48.607493 systemd-logind[1201]: Session 2 logged out. Waiting for processes to exit. Jul 11 00:28:48.608365 systemd-logind[1201]: Removed session 2. Jul 11 00:28:48.638773 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 35622 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:48.640191 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.643350 systemd-logind[1201]: New session 3 of user core. Jul 11 00:28:48.644161 systemd[1]: Started session-3.scope. Jul 11 00:28:48.694466 sshd[1297]: pam_unix(sshd:session): session closed for user core Jul 11 00:28:48.698124 systemd[1]: sshd@2-10.0.0.65:22-10.0.0.1:35622.service: Deactivated successfully. Jul 11 00:28:48.698681 systemd[1]: session-3.scope: Deactivated successfully. Jul 11 00:28:48.699135 systemd-logind[1201]: Session 3 logged out. Waiting for processes to exit. Jul 11 00:28:48.700186 systemd[1]: Started sshd@3-10.0.0.65:22-10.0.0.1:35626.service. Jul 11 00:28:48.700854 systemd-logind[1201]: Removed session 3. Jul 11 00:28:48.735623 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 35626 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:48.736929 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.740332 systemd-logind[1201]: New session 4 of user core. Jul 11 00:28:48.741125 systemd[1]: Started session-4.scope. Jul 11 00:28:48.795963 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 11 00:28:48.799469 systemd[1]: Started sshd@4-10.0.0.65:22-10.0.0.1:35642.service. Jul 11 00:28:48.799976 systemd[1]: sshd@3-10.0.0.65:22-10.0.0.1:35626.service: Deactivated successfully. Jul 11 00:28:48.800581 systemd[1]: session-4.scope: Deactivated successfully. Jul 11 00:28:48.801037 systemd-logind[1201]: Session 4 logged out. Waiting for processes to exit. Jul 11 00:28:48.801841 systemd-logind[1201]: Removed session 4. Jul 11 00:28:48.836187 sshd[1310]: Accepted publickey for core from 10.0.0.1 port 35642 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:48.837625 sshd[1310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.840740 systemd-logind[1201]: New session 5 of user core. Jul 11 00:28:48.841517 systemd[1]: Started session-5.scope. Jul 11 00:28:48.900305 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 11 00:28:48.900543 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:28:48.915590 dbus-daemon[1189]: avc: received setenforce notice (enforcing=1) Jul 11 00:28:48.916381 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 11 00:28:48.918370 sshd[1310]: pam_unix(sshd:session): session closed for user core Jul 11 00:28:48.921181 systemd[1]: sshd@4-10.0.0.65:22-10.0.0.1:35642.service: Deactivated successfully. Jul 11 00:28:48.921798 systemd[1]: session-5.scope: Deactivated successfully. Jul 11 00:28:48.922320 systemd-logind[1201]: Session 5 logged out. Waiting for processes to exit. Jul 11 00:28:48.923458 systemd[1]: Started sshd@5-10.0.0.65:22-10.0.0.1:35648.service. Jul 11 00:28:48.924172 systemd-logind[1201]: Removed session 5. Jul 11 00:28:48.958857 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 35648 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:48.960416 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:48.963832 systemd-logind[1201]: New session 6 of user core. Jul 11 00:28:48.964625 systemd[1]: Started session-6.scope. Jul 11 00:28:49.016031 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 11 00:28:49.016247 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:28:49.018890 sudo[1322]: pam_unix(sudo:session): session closed for user root Jul 11 00:28:49.023058 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 11 00:28:49.023260 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:28:49.031345 systemd[1]: Stopping audit-rules.service... Jul 11 00:28:49.031000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:28:49.032584 auditctl[1325]: No rules Jul 11 00:28:49.032853 systemd[1]: audit-rules.service: Deactivated successfully. Jul 11 00:28:49.033004 systemd[1]: Stopped audit-rules.service. Jul 11 00:28:49.034284 kernel: kauditd_printk_skb: 165 callbacks suppressed Jul 11 00:28:49.034320 kernel: audit: type=1305 audit(1752193729.031:198): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:28:49.034336 kernel: audit: type=1300 audit(1752193729.031:198): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff8ff6350 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.031000 audit[1325]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff8ff6350 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.034469 systemd[1]: Starting audit-rules.service... Jul 11 00:28:49.031000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:28:49.037901 kernel: audit: type=1327 audit(1752193729.031:198): proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:28:49.037965 kernel: audit: type=1131 audit(1752193729.031:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.050524 augenrules[1342]: No rules Jul 11 00:28:49.051450 systemd[1]: Finished audit-rules.service. Jul 11 00:28:49.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.053190 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 11 00:28:49.051000 audit[1321]: USER_END pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.054635 sshd[1318]: pam_unix(sshd:session): session closed for user core Jul 11 00:28:49.056047 kernel: audit: type=1130 audit(1752193729.050:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.056106 kernel: audit: type=1106 audit(1752193729.051:201): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.056122 kernel: audit: type=1104 audit(1752193729.051:202): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.051000 audit[1321]: CRED_DISP pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.058178 systemd[1]: Started sshd@6-10.0.0.65:22-10.0.0.1:35658.service. Jul 11 00:28:49.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.65:22-10.0.0.1:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.063324 kernel: audit: type=1130 audit(1752193729.056:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.65:22-10.0.0.1:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.063395 kernel: audit: type=1106 audit(1752193729.061:204): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.061000 audit[1318]: USER_END pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.068177 kernel: audit: type=1104 audit(1752193729.062:205): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.062000 audit[1318]: CRED_DISP pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.65:22-10.0.0.1:35648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.064841 systemd[1]: sshd@5-10.0.0.65:22-10.0.0.1:35648.service: Deactivated successfully. Jul 11 00:28:49.065478 systemd[1]: session-6.scope: Deactivated successfully. Jul 11 00:28:49.066482 systemd-logind[1201]: Session 6 logged out. Waiting for processes to exit. Jul 11 00:28:49.067250 systemd-logind[1201]: Removed session 6. Jul 11 00:28:49.091000 audit[1347]: USER_ACCT pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.092135 sshd[1347]: Accepted publickey for core from 10.0.0.1 port 35658 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:49.092000 audit[1347]: CRED_ACQ pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.092000 audit[1347]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4ef7bb0 a2=3 a3=1 items=0 ppid=1 pid=1347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.092000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:28:49.093271 sshd[1347]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:49.097238 systemd[1]: Started session-7.scope. Jul 11 00:28:49.097566 systemd-logind[1201]: New session 7 of user core. Jul 11 00:28:49.101000 audit[1347]: USER_START pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.101000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:49.150012 sudo[1351]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 11 00:28:49.150248 sudo[1351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:28:49.148000 audit[1351]: USER_ACCT pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.148000 audit[1351]: CRED_REFR pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.151000 audit[1351]: USER_START pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.214523 systemd[1]: Starting docker.service... Jul 11 00:28:49.306866 env[1363]: time="2025-07-11T00:28:49.306812688Z" level=info msg="Starting up" Jul 11 00:28:49.308266 env[1363]: time="2025-07-11T00:28:49.308245590Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:28:49.308266 env[1363]: time="2025-07-11T00:28:49.308264388Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:28:49.308338 env[1363]: time="2025-07-11T00:28:49.308283346Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:28:49.308338 env[1363]: time="2025-07-11T00:28:49.308293042Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:28:49.310119 env[1363]: time="2025-07-11T00:28:49.310095507Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:28:49.310252 env[1363]: time="2025-07-11T00:28:49.310237982Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:28:49.310319 env[1363]: time="2025-07-11T00:28:49.310298415Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:28:49.310370 env[1363]: time="2025-07-11T00:28:49.310356276Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:28:49.481316 env[1363]: time="2025-07-11T00:28:49.480973628Z" level=info msg="Loading containers: start." Jul 11 00:28:49.525000 audit[1397]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.525000 audit[1397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc0697d00 a2=0 a3=1 items=0 ppid=1363 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.525000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 11 00:28:49.527000 audit[1399]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.527000 audit[1399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcc479f20 a2=0 a3=1 items=0 ppid=1363 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.527000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 11 00:28:49.529000 audit[1401]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.529000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd4ef8b20 a2=0 a3=1 items=0 ppid=1363 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.529000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:28:49.532000 audit[1403]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.532000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd3d8f620 a2=0 a3=1 items=0 ppid=1363 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.532000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:28:49.534000 audit[1405]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.534000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffca79dab0 a2=0 a3=1 items=0 ppid=1363 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.534000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 11 00:28:49.564000 audit[1410]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.564000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffda36bc20 a2=0 a3=1 items=0 ppid=1363 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.564000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 11 00:28:49.572000 audit[1412]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.572000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdabd0da0 a2=0 a3=1 items=0 ppid=1363 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.572000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 11 00:28:49.574000 audit[1414]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.574000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff175cee0 a2=0 a3=1 items=0 ppid=1363 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.574000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 11 00:28:49.575000 audit[1416]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.575000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffb69f0a0 a2=0 a3=1 items=0 ppid=1363 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.575000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:28:49.582000 audit[1420]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.582000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe19c3970 a2=0 a3=1 items=0 ppid=1363 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.582000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:28:49.590000 audit[1421]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.590000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd48b6a50 a2=0 a3=1 items=0 ppid=1363 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.590000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:28:49.600418 kernel: Initializing XFRM netlink socket Jul 11 00:28:49.623154 env[1363]: time="2025-07-11T00:28:49.623102573Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 11 00:28:49.637000 audit[1429]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.637000 audit[1429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffe90e8730 a2=0 a3=1 items=0 ppid=1363 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.637000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 11 00:28:49.652000 audit[1432]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.652000 audit[1432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc4a0a790 a2=0 a3=1 items=0 ppid=1363 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.652000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 11 00:28:49.655000 audit[1435]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.655000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe47e4d90 a2=0 a3=1 items=0 ppid=1363 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.655000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 11 00:28:49.657000 audit[1437]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.657000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc0952230 a2=0 a3=1 items=0 ppid=1363 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.657000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 11 00:28:49.659000 audit[1439]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.659000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd54c8d20 a2=0 a3=1 items=0 ppid=1363 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.659000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 11 00:28:49.660000 audit[1441]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.660000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff1a8e390 a2=0 a3=1 items=0 ppid=1363 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 11 00:28:49.661000 audit[1443]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.661000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff14851e0 a2=0 a3=1 items=0 ppid=1363 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.661000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 11 00:28:49.672000 audit[1446]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.672000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc0125eb0 a2=0 a3=1 items=0 ppid=1363 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 11 00:28:49.674000 audit[1448]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.674000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd0cd6cf0 a2=0 a3=1 items=0 ppid=1363 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:28:49.676000 audit[1450]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.676000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc3966e00 a2=0 a3=1 items=0 ppid=1363 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.676000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:28:49.679000 audit[1452]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.679000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff37792a0 a2=0 a3=1 items=0 ppid=1363 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.679000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 11 00:28:49.680843 systemd-networkd[1045]: docker0: Link UP Jul 11 00:28:49.686000 audit[1456]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.686000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd6c01ac0 a2=0 a3=1 items=0 ppid=1363 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.686000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:28:49.693000 audit[1457]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:28:49.693000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffb9e0480 a2=0 a3=1 items=0 ppid=1363 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:49.693000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:28:49.695734 env[1363]: time="2025-07-11T00:28:49.695694159Z" level=info msg="Loading containers: done." Jul 11 00:28:49.711910 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2518754177-merged.mount: Deactivated successfully. Jul 11 00:28:49.725730 env[1363]: time="2025-07-11T00:28:49.725677365Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 11 00:28:49.726183 env[1363]: time="2025-07-11T00:28:49.726160830Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 11 00:28:49.726381 env[1363]: time="2025-07-11T00:28:49.726356297Z" level=info msg="Daemon has completed initialization" Jul 11 00:28:49.741910 systemd[1]: Started docker.service. Jul 11 00:28:49.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:49.748739 env[1363]: time="2025-07-11T00:28:49.748617523Z" level=info msg="API listen on /run/docker.sock" Jul 11 00:28:50.397776 env[1210]: time="2025-07-11T00:28:50.397706844Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 11 00:28:50.944827 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3186298005.mount: Deactivated successfully. Jul 11 00:28:52.029213 env[1210]: time="2025-07-11T00:28:52.029162859Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:52.030484 env[1210]: time="2025-07-11T00:28:52.030454826Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:52.032200 env[1210]: time="2025-07-11T00:28:52.032173624Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:52.034636 env[1210]: time="2025-07-11T00:28:52.034603580Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:52.035291 env[1210]: time="2025-07-11T00:28:52.035255521Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c\"" Jul 11 00:28:52.038547 env[1210]: time="2025-07-11T00:28:52.038521622Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 11 00:28:53.372698 env[1210]: time="2025-07-11T00:28:53.372641287Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:53.374791 env[1210]: time="2025-07-11T00:28:53.374760568Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:53.376967 env[1210]: time="2025-07-11T00:28:53.376934030Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:53.378488 env[1210]: time="2025-07-11T00:28:53.378462640Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:53.379244 env[1210]: time="2025-07-11T00:28:53.379192362Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f\"" Jul 11 00:28:53.380497 env[1210]: time="2025-07-11T00:28:53.380459526Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 11 00:28:54.641892 env[1210]: time="2025-07-11T00:28:54.641824362Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:54.643230 env[1210]: time="2025-07-11T00:28:54.643193802Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:54.647158 env[1210]: time="2025-07-11T00:28:54.647124413Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:54.649748 env[1210]: time="2025-07-11T00:28:54.649716018Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:54.650592 env[1210]: time="2025-07-11T00:28:54.650555592Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c\"" Jul 11 00:28:54.651779 env[1210]: time="2025-07-11T00:28:54.651755757Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 11 00:28:55.608790 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 11 00:28:55.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:55.608962 systemd[1]: Stopped kubelet.service. Jul 11 00:28:55.609494 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 11 00:28:55.609553 kernel: audit: type=1130 audit(1752193735.608:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:55.610302 systemd[1]: Starting kubelet.service... Jul 11 00:28:55.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:55.612988 kernel: audit: type=1131 audit(1752193735.608:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:55.637828 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3101108267.mount: Deactivated successfully. Jul 11 00:28:55.714329 systemd[1]: Started kubelet.service. Jul 11 00:28:55.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:55.717414 kernel: audit: type=1130 audit(1752193735.713:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:55.751810 kubelet[1498]: E0711 00:28:55.751755 1498 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:28:55.754012 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:28:55.754144 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:28:55.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:28:55.756416 kernel: audit: type=1131 audit(1752193735.753:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:28:56.171382 env[1210]: time="2025-07-11T00:28:56.171333884Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:56.172767 env[1210]: time="2025-07-11T00:28:56.172729934Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:56.174079 env[1210]: time="2025-07-11T00:28:56.174051972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:56.175859 env[1210]: time="2025-07-11T00:28:56.175829508Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:56.176231 env[1210]: time="2025-07-11T00:28:56.176200957Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89\"" Jul 11 00:28:56.177114 env[1210]: time="2025-07-11T00:28:56.177070804Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 11 00:28:56.672710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount566026315.mount: Deactivated successfully. Jul 11 00:28:57.599755 env[1210]: time="2025-07-11T00:28:57.599704815Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:57.601118 env[1210]: time="2025-07-11T00:28:57.601089199Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:57.603034 env[1210]: time="2025-07-11T00:28:57.603005838Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:57.604760 env[1210]: time="2025-07-11T00:28:57.604719699Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:57.605574 env[1210]: time="2025-07-11T00:28:57.605551381Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 11 00:28:57.606209 env[1210]: time="2025-07-11T00:28:57.606160556Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 11 00:28:58.027612 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2082653933.mount: Deactivated successfully. Jul 11 00:28:58.030109 env[1210]: time="2025-07-11T00:28:58.030064355Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:58.031872 env[1210]: time="2025-07-11T00:28:58.031845226Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:58.033298 env[1210]: time="2025-07-11T00:28:58.033265528Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:58.035455 env[1210]: time="2025-07-11T00:28:58.035423116Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:28:58.036069 env[1210]: time="2025-07-11T00:28:58.036037474Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 11 00:28:58.036772 env[1210]: time="2025-07-11T00:28:58.036748123Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 11 00:28:58.529685 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1217674293.mount: Deactivated successfully. Jul 11 00:29:00.250206 env[1210]: time="2025-07-11T00:29:00.250159124Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:00.253062 env[1210]: time="2025-07-11T00:29:00.253029110Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:00.254956 env[1210]: time="2025-07-11T00:29:00.254931381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:00.257610 env[1210]: time="2025-07-11T00:29:00.257576835Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:00.258548 env[1210]: time="2025-07-11T00:29:00.258513227Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Jul 11 00:29:04.399233 systemd[1]: Stopped kubelet.service. Jul 11 00:29:04.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.401302 systemd[1]: Starting kubelet.service... Jul 11 00:29:04.403053 kernel: audit: type=1130 audit(1752193744.398:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.403181 kernel: audit: type=1131 audit(1752193744.398:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.425784 systemd[1]: Reloading. Jul 11 00:29:04.476080 /usr/lib/systemd/system-generators/torcx-generator[1555]: time="2025-07-11T00:29:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:29:04.476111 /usr/lib/systemd/system-generators/torcx-generator[1555]: time="2025-07-11T00:29:04Z" level=info msg="torcx already run" Jul 11 00:29:04.611729 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:29:04.611750 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:29:04.626921 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679154 kernel: audit: type=1400 audit(1752193744.675:246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679215 kernel: audit: type=1400 audit(1752193744.675:247): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679238 kernel: audit: type=1400 audit(1752193744.675:248): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680847 kernel: audit: type=1400 audit(1752193744.675:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682550 kernel: audit: type=1400 audit(1752193744.675:250): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684251 kernel: audit: type=1400 audit(1752193744.675:251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687596 kernel: audit: type=1400 audit(1752193744.675:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687625 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 11 00:29:04.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit: BPF prog-id=46 op=LOAD Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.678000 audit: BPF prog-id=47 op=LOAD Jul 11 00:29:04.678000 audit: BPF prog-id=30 op=UNLOAD Jul 11 00:29:04.678000 audit: BPF prog-id=31 op=UNLOAD Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit: BPF prog-id=48 op=LOAD Jul 11 00:29:04.680000 audit: BPF prog-id=32 op=UNLOAD Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit: BPF prog-id=49 op=LOAD Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.683000 audit: BPF prog-id=50 op=LOAD Jul 11 00:29:04.683000 audit: BPF prog-id=33 op=UNLOAD Jul 11 00:29:04.683000 audit: BPF prog-id=34 op=UNLOAD Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.685000 audit: BPF prog-id=51 op=LOAD Jul 11 00:29:04.685000 audit: BPF prog-id=35 op=UNLOAD Jul 11 00:29:04.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit: BPF prog-id=52 op=LOAD Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.687000 audit: BPF prog-id=53 op=LOAD Jul 11 00:29:04.687000 audit: BPF prog-id=36 op=UNLOAD Jul 11 00:29:04.687000 audit: BPF prog-id=37 op=UNLOAD Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.689000 audit: BPF prog-id=54 op=LOAD Jul 11 00:29:04.689000 audit: BPF prog-id=38 op=UNLOAD Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.690000 audit: BPF prog-id=55 op=LOAD Jul 11 00:29:04.691000 audit: BPF prog-id=44 op=UNLOAD Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit: BPF prog-id=56 op=LOAD Jul 11 00:29:04.692000 audit: BPF prog-id=39 op=UNLOAD Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.692000 audit: BPF prog-id=57 op=LOAD Jul 11 00:29:04.692000 audit: BPF prog-id=40 op=UNLOAD Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit: BPF prog-id=58 op=LOAD Jul 11 00:29:04.693000 audit: BPF prog-id=41 op=UNLOAD Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit: BPF prog-id=59 op=LOAD Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:04.694000 audit: BPF prog-id=60 op=LOAD Jul 11 00:29:04.694000 audit: BPF prog-id=42 op=UNLOAD Jul 11 00:29:04.694000 audit: BPF prog-id=43 op=UNLOAD Jul 11 00:29:04.702649 systemd[1]: Started kubelet.service. Jul 11 00:29:04.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.706258 systemd[1]: Stopping kubelet.service... Jul 11 00:29:04.706876 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:29:04.707073 systemd[1]: Stopped kubelet.service. Jul 11 00:29:04.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.708913 systemd[1]: Starting kubelet.service... Jul 11 00:29:04.804057 systemd[1]: Started kubelet.service. Jul 11 00:29:04.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:04.845508 kubelet[1603]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:29:04.845508 kubelet[1603]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 11 00:29:04.845508 kubelet[1603]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:29:04.845861 kubelet[1603]: I0711 00:29:04.845553 1603 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:29:05.801463 kubelet[1603]: I0711 00:29:05.801403 1603 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 11 00:29:05.801463 kubelet[1603]: I0711 00:29:05.801435 1603 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:29:05.801684 kubelet[1603]: I0711 00:29:05.801668 1603 server.go:934] "Client rotation is on, will bootstrap in background" Jul 11 00:29:05.835832 kubelet[1603]: E0711 00:29:05.835781 1603 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.65:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:05.836340 kubelet[1603]: I0711 00:29:05.836313 1603 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:29:05.841016 kubelet[1603]: E0711 00:29:05.840992 1603 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:29:05.841016 kubelet[1603]: I0711 00:29:05.841016 1603 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:29:05.844804 kubelet[1603]: I0711 00:29:05.844788 1603 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:29:05.845608 kubelet[1603]: I0711 00:29:05.845590 1603 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 11 00:29:05.845830 kubelet[1603]: I0711 00:29:05.845714 1603 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:29:05.845886 kubelet[1603]: I0711 00:29:05.845733 1603 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:29:05.845964 kubelet[1603]: I0711 00:29:05.845948 1603 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:29:05.845964 kubelet[1603]: I0711 00:29:05.845957 1603 container_manager_linux.go:300] "Creating device plugin manager" Jul 11 00:29:05.846184 kubelet[1603]: I0711 00:29:05.846170 1603 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:29:05.853936 kubelet[1603]: I0711 00:29:05.853909 1603 kubelet.go:408] "Attempting to sync node with API server" Jul 11 00:29:05.854056 kubelet[1603]: I0711 00:29:05.854043 1603 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:29:05.854145 kubelet[1603]: I0711 00:29:05.854134 1603 kubelet.go:314] "Adding apiserver pod source" Jul 11 00:29:05.854281 kubelet[1603]: I0711 00:29:05.854271 1603 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:29:05.857075 kubelet[1603]: W0711 00:29:05.857010 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:05.857151 kubelet[1603]: E0711 00:29:05.857084 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.65:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:05.857151 kubelet[1603]: W0711 00:29:05.857130 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:05.857205 kubelet[1603]: E0711 00:29:05.857157 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:05.860638 kubelet[1603]: I0711 00:29:05.860610 1603 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:29:05.861266 kubelet[1603]: I0711 00:29:05.861250 1603 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 11 00:29:05.861452 kubelet[1603]: W0711 00:29:05.861439 1603 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 11 00:29:05.862356 kubelet[1603]: I0711 00:29:05.862340 1603 server.go:1274] "Started kubelet" Jul 11 00:29:05.883178 kubelet[1603]: I0711 00:29:05.883140 1603 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:29:05.884336 kubelet[1603]: I0711 00:29:05.884315 1603 server.go:449] "Adding debug handlers to kubelet server" Jul 11 00:29:05.885375 kubelet[1603]: I0711 00:29:05.885325 1603 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:29:05.885606 kubelet[1603]: I0711 00:29:05.885590 1603 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:29:05.884000 audit[1603]: AVC avc: denied { mac_admin } for pid=1603 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:05.884000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:29:05.884000 audit[1603]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ac5230 a1=4000aa0978 a2=4000ac5200 a3=25 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.884000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:29:05.884000 audit[1603]: AVC avc: denied { mac_admin } for pid=1603 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:05.884000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:29:05.884000 audit[1603]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ac2d20 a1=4000aa0990 a2=4000ac52c0 a3=25 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.884000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:29:05.886422 kubelet[1603]: I0711 00:29:05.886084 1603 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:29:05.886422 kubelet[1603]: I0711 00:29:05.886120 1603 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 11 00:29:05.886422 kubelet[1603]: I0711 00:29:05.886178 1603 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:29:05.886724 kubelet[1603]: I0711 00:29:05.886705 1603 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:29:05.888158 kubelet[1603]: E0711 00:29:05.888135 1603 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:29:05.888268 kubelet[1603]: I0711 00:29:05.888256 1603 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 11 00:29:05.888543 kubelet[1603]: I0711 00:29:05.888522 1603 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 11 00:29:05.887000 audit[1616]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.887000 audit[1616]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd0313280 a2=0 a3=1 items=0 ppid=1603 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.887000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:29:05.888854 kubelet[1603]: E0711 00:29:05.888747 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.65:6443: connect: connection refused" interval="200ms" Jul 11 00:29:05.888929 kubelet[1603]: I0711 00:29:05.888915 1603 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:29:05.888986 kubelet[1603]: I0711 00:29:05.888939 1603 factory.go:221] Registration of the systemd container factory successfully Jul 11 00:29:05.889118 kubelet[1603]: I0711 00:29:05.889101 1603 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:29:05.888000 audit[1617]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1617 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.888000 audit[1617]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff48a19d0 a2=0 a3=1 items=0 ppid=1603 pid=1617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:29:05.889630 kubelet[1603]: W0711 00:29:05.889600 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:05.889670 kubelet[1603]: E0711 00:29:05.889640 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:05.889738 kubelet[1603]: E0711 00:29:05.889719 1603 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 11 00:29:05.889000 audit[1619]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.889000 audit[1619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe526c3b0 a2=0 a3=1 items=0 ppid=1603 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:29:05.891598 kubelet[1603]: I0711 00:29:05.891573 1603 factory.go:221] Registration of the containerd container factory successfully Jul 11 00:29:05.891000 audit[1621]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.891000 audit[1621]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc695b010 a2=0 a3=1 items=0 ppid=1603 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.891000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:29:05.896736 kubelet[1603]: E0711 00:29:05.895726 1603 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.65:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.65:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18510aeda7c8d2c0 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-11 00:29:05.862316736 +0000 UTC m=+1.053299984,LastTimestamp:2025-07-11 00:29:05.862316736 +0000 UTC m=+1.053299984,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 11 00:29:05.899000 audit[1625]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.899000 audit[1625]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff35f44b0 a2=0 a3=1 items=0 ppid=1603 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.899000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 11 00:29:05.901312 kubelet[1603]: I0711 00:29:05.901271 1603 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 11 00:29:05.900000 audit[1628]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:05.900000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff3f09510 a2=0 a3=1 items=0 ppid=1603 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.900000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:29:05.902222 kubelet[1603]: I0711 00:29:05.902179 1603 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 11 00:29:05.902222 kubelet[1603]: I0711 00:29:05.902195 1603 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 11 00:29:05.902222 kubelet[1603]: I0711 00:29:05.902215 1603 kubelet.go:2321] "Starting kubelet main sync loop" Jul 11 00:29:05.902298 kubelet[1603]: E0711 00:29:05.902250 1603 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:29:05.901000 audit[1629]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.901000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffe0e24f0 a2=0 a3=1 items=0 ppid=1603 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.901000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:29:05.901000 audit[1630]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:05.901000 audit[1630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd248f650 a2=0 a3=1 items=0 ppid=1603 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.901000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:29:05.902000 audit[1631]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.902000 audit[1631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffead78530 a2=0 a3=1 items=0 ppid=1603 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.902000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:29:05.903000 audit[1632]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:05.903000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd0ed6ba0 a2=0 a3=1 items=0 ppid=1603 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.903000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:29:05.903000 audit[1633]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:05.903000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc83dd8f0 a2=0 a3=1 items=0 ppid=1603 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.903000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:29:05.904000 audit[1634]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:05.904000 audit[1634]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffde32d2c0 a2=0 a3=1 items=0 ppid=1603 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:29:05.906179 kubelet[1603]: W0711 00:29:05.906150 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:05.906298 kubelet[1603]: E0711 00:29:05.906276 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:05.906637 kubelet[1603]: I0711 00:29:05.906615 1603 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 11 00:29:05.906735 kubelet[1603]: I0711 00:29:05.906720 1603 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 11 00:29:05.906810 kubelet[1603]: I0711 00:29:05.906801 1603 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:29:05.908494 kubelet[1603]: I0711 00:29:05.908475 1603 policy_none.go:49] "None policy: Start" Jul 11 00:29:05.909050 kubelet[1603]: I0711 00:29:05.909037 1603 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 11 00:29:05.909140 kubelet[1603]: I0711 00:29:05.909129 1603 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:29:05.916018 systemd[1]: Created slice kubepods.slice. Jul 11 00:29:05.922076 systemd[1]: Created slice kubepods-burstable.slice. Jul 11 00:29:05.924725 systemd[1]: Created slice kubepods-besteffort.slice. Jul 11 00:29:05.940081 kubelet[1603]: I0711 00:29:05.940048 1603 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 11 00:29:05.938000 audit[1603]: AVC avc: denied { mac_admin } for pid=1603 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:05.938000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:29:05.938000 audit[1603]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400085c150 a1=4000c7a870 a2=400085c120 a3=25 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:05.938000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:29:05.940298 kubelet[1603]: I0711 00:29:05.940105 1603 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 11 00:29:05.940436 kubelet[1603]: I0711 00:29:05.940203 1603 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:29:05.940968 kubelet[1603]: I0711 00:29:05.940463 1603 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:29:05.940968 kubelet[1603]: I0711 00:29:05.940671 1603 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:29:05.941580 kubelet[1603]: E0711 00:29:05.941551 1603 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 11 00:29:06.013708 systemd[1]: Created slice kubepods-burstable-pod559d2209b86d0ae299b08669643e3dd9.slice. Jul 11 00:29:06.026386 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 11 00:29:06.029942 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 11 00:29:06.041961 kubelet[1603]: I0711 00:29:06.041925 1603 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 11 00:29:06.042541 kubelet[1603]: E0711 00:29:06.042507 1603 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Jul 11 00:29:06.090134 kubelet[1603]: E0711 00:29:06.090015 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.65:6443: connect: connection refused" interval="400ms" Jul 11 00:29:06.090346 kubelet[1603]: I0711 00:29:06.090322 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/559d2209b86d0ae299b08669643e3dd9-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"559d2209b86d0ae299b08669643e3dd9\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:06.090484 kubelet[1603]: I0711 00:29:06.090465 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/559d2209b86d0ae299b08669643e3dd9-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"559d2209b86d0ae299b08669643e3dd9\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:06.090572 kubelet[1603]: I0711 00:29:06.090557 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:06.090662 kubelet[1603]: I0711 00:29:06.090647 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:06.090751 kubelet[1603]: I0711 00:29:06.090738 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:06.090819 kubelet[1603]: I0711 00:29:06.090807 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/559d2209b86d0ae299b08669643e3dd9-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"559d2209b86d0ae299b08669643e3dd9\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:06.090893 kubelet[1603]: I0711 00:29:06.090881 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:06.090963 kubelet[1603]: I0711 00:29:06.090950 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:06.091031 kubelet[1603]: I0711 00:29:06.091019 1603 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:29:06.244666 kubelet[1603]: I0711 00:29:06.244633 1603 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 11 00:29:06.244996 kubelet[1603]: E0711 00:29:06.244963 1603 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Jul 11 00:29:06.325597 kubelet[1603]: E0711 00:29:06.325557 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:06.326270 env[1210]: time="2025-07-11T00:29:06.326230514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:559d2209b86d0ae299b08669643e3dd9,Namespace:kube-system,Attempt:0,}" Jul 11 00:29:06.328935 kubelet[1603]: E0711 00:29:06.328899 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:06.329744 env[1210]: time="2025-07-11T00:29:06.329446831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 11 00:29:06.332294 kubelet[1603]: E0711 00:29:06.332268 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:06.335383 env[1210]: time="2025-07-11T00:29:06.332973928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 11 00:29:06.490916 kubelet[1603]: E0711 00:29:06.490490 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.65:6443: connect: connection refused" interval="800ms" Jul 11 00:29:06.647128 kubelet[1603]: I0711 00:29:06.647089 1603 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 11 00:29:06.647619 kubelet[1603]: E0711 00:29:06.647384 1603 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Jul 11 00:29:06.723885 kubelet[1603]: W0711 00:29:06.723785 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:06.723885 kubelet[1603]: E0711 00:29:06.723864 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:06.855221 kubelet[1603]: W0711 00:29:06.855043 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:06.855221 kubelet[1603]: E0711 00:29:06.855120 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:06.961265 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1839921938.mount: Deactivated successfully. Jul 11 00:29:06.967269 env[1210]: time="2025-07-11T00:29:06.967214811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.968423 env[1210]: time="2025-07-11T00:29:06.968385449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.969591 env[1210]: time="2025-07-11T00:29:06.969565117Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.973114 env[1210]: time="2025-07-11T00:29:06.973082065Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.974413 env[1210]: time="2025-07-11T00:29:06.974372691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.976250 env[1210]: time="2025-07-11T00:29:06.976214753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.977410 env[1210]: time="2025-07-11T00:29:06.977370088Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.980463 env[1210]: time="2025-07-11T00:29:06.980427579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.981534 env[1210]: time="2025-07-11T00:29:06.981509194Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.982941 env[1210]: time="2025-07-11T00:29:06.982916493Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.985936 env[1210]: time="2025-07-11T00:29:06.985892633Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:06.986845 env[1210]: time="2025-07-11T00:29:06.986815821Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:07.028256 env[1210]: time="2025-07-11T00:29:07.028194210Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:07.028421 env[1210]: time="2025-07-11T00:29:07.028239446Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:07.028421 env[1210]: time="2025-07-11T00:29:07.028249797Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:07.028570 env[1210]: time="2025-07-11T00:29:07.028543315Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e2d45ba1931cbf4a96010fb9a3b64950ecd881934c5e0e58c079b210aa55fc7d pid=1657 runtime=io.containerd.runc.v2 Jul 11 00:29:07.030817 env[1210]: time="2025-07-11T00:29:07.030649737Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:07.030817 env[1210]: time="2025-07-11T00:29:07.030686821Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:07.030817 env[1210]: time="2025-07-11T00:29:07.030696971Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:07.030988 env[1210]: time="2025-07-11T00:29:07.030880915Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4854fe62880d689dfa1d3ae2478b72e06ed1113a947f4a71bc221ed3b866c2a8 pid=1656 runtime=io.containerd.runc.v2 Jul 11 00:29:07.031074 env[1210]: time="2025-07-11T00:29:07.030627518Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:07.031074 env[1210]: time="2025-07-11T00:29:07.030663204Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:07.031074 env[1210]: time="2025-07-11T00:29:07.030673034Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:07.031074 env[1210]: time="2025-07-11T00:29:07.030779253Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0f29efb97eefcf88768294f6bb3d0bf5080600dcd90cf895f606d79287c429f3 pid=1665 runtime=io.containerd.runc.v2 Jul 11 00:29:07.043373 systemd[1]: Started cri-containerd-e2d45ba1931cbf4a96010fb9a3b64950ecd881934c5e0e58c079b210aa55fc7d.scope. Jul 11 00:29:07.057418 systemd[1]: Started cri-containerd-0f29efb97eefcf88768294f6bb3d0bf5080600dcd90cf895f606d79287c429f3.scope. Jul 11 00:29:07.058293 systemd[1]: Started cri-containerd-4854fe62880d689dfa1d3ae2478b72e06ed1113a947f4a71bc221ed3b866c2a8.scope. Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.089000 audit: BPF prog-id=61 op=LOAD Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1665 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066323965666239376565666366383837363832393466366262336430 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1665 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066323965666239376565666366383837363832393466366262336430 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit: BPF prog-id=62 op=LOAD Jul 11 00:29:07.090000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1665 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066323965666239376565666366383837363832393466366262336430 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit: BPF prog-id=63 op=LOAD Jul 11 00:29:07.090000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1665 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066323965666239376565666366383837363832393466366262336430 Jul 11 00:29:07.090000 audit: BPF prog-id=63 op=UNLOAD Jul 11 00:29:07.090000 audit: BPF prog-id=62 op=UNLOAD Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.090000 audit: BPF prog-id=64 op=LOAD Jul 11 00:29:07.090000 audit[1687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1665 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066323965666239376565666366383837363832393466366262336430 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.093000 audit: BPF prog-id=65 op=LOAD Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1657 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643435626131393331636266346139363031306662396133623634 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1657 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643435626131393331636266346139363031306662396133623634 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.094000 audit: BPF prog-id=66 op=LOAD Jul 11 00:29:07.094000 audit[1679]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1657 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643435626131393331636266346139363031306662396133623634 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit: BPF prog-id=67 op=LOAD Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1656 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438353466653632383830643638396466613164336165323437386237 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1656 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438353466653632383830643638396466613164336165323437386237 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit: BPF prog-id=68 op=LOAD Jul 11 00:29:07.095000 audit[1688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1656 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438353466653632383830643638396466613164336165323437386237 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit: BPF prog-id=69 op=LOAD Jul 11 00:29:07.095000 audit[1688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1656 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438353466653632383830643638396466613164336165323437386237 Jul 11 00:29:07.096000 audit: BPF prog-id=69 op=UNLOAD Jul 11 00:29:07.096000 audit: BPF prog-id=68 op=UNLOAD Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.096000 audit: BPF prog-id=70 op=LOAD Jul 11 00:29:07.096000 audit[1688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1656 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438353466653632383830643638396466613164336165323437386237 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.095000 audit: BPF prog-id=71 op=LOAD Jul 11 00:29:07.095000 audit[1679]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1657 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643435626131393331636266346139363031306662396133623634 Jul 11 00:29:07.097000 audit: BPF prog-id=71 op=UNLOAD Jul 11 00:29:07.097000 audit: BPF prog-id=66 op=UNLOAD Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { perfmon } for pid=1679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit[1679]: AVC avc: denied { bpf } for pid=1679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.097000 audit: BPF prog-id=72 op=LOAD Jul 11 00:29:07.097000 audit[1679]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1657 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643435626131393331636266346139363031306662396133623634 Jul 11 00:29:07.125815 env[1210]: time="2025-07-11T00:29:07.125776217Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"0f29efb97eefcf88768294f6bb3d0bf5080600dcd90cf895f606d79287c429f3\"" Jul 11 00:29:07.126606 env[1210]: time="2025-07-11T00:29:07.126569217Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"4854fe62880d689dfa1d3ae2478b72e06ed1113a947f4a71bc221ed3b866c2a8\"" Jul 11 00:29:07.126920 env[1210]: time="2025-07-11T00:29:07.126887672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:559d2209b86d0ae299b08669643e3dd9,Namespace:kube-system,Attempt:0,} returns sandbox id \"e2d45ba1931cbf4a96010fb9a3b64950ecd881934c5e0e58c079b210aa55fc7d\"" Jul 11 00:29:07.128778 kubelet[1603]: E0711 00:29:07.128540 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:07.128778 kubelet[1603]: E0711 00:29:07.128597 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:07.128778 kubelet[1603]: E0711 00:29:07.128554 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:07.131767 env[1210]: time="2025-07-11T00:29:07.131738184Z" level=info msg="CreateContainer within sandbox \"4854fe62880d689dfa1d3ae2478b72e06ed1113a947f4a71bc221ed3b866c2a8\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 11 00:29:07.131963 env[1210]: time="2025-07-11T00:29:07.131795529Z" level=info msg="CreateContainer within sandbox \"0f29efb97eefcf88768294f6bb3d0bf5080600dcd90cf895f606d79287c429f3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 11 00:29:07.132275 env[1210]: time="2025-07-11T00:29:07.131836050Z" level=info msg="CreateContainer within sandbox \"e2d45ba1931cbf4a96010fb9a3b64950ecd881934c5e0e58c079b210aa55fc7d\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 11 00:29:07.148201 env[1210]: time="2025-07-11T00:29:07.148146100Z" level=info msg="CreateContainer within sandbox \"4854fe62880d689dfa1d3ae2478b72e06ed1113a947f4a71bc221ed3b866c2a8\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"66b68b279c2468ed0cfb681f6f678478a37926a4dea73ffb73d3dcf1c89f5241\"" Jul 11 00:29:07.148781 env[1210]: time="2025-07-11T00:29:07.148752958Z" level=info msg="StartContainer for \"66b68b279c2468ed0cfb681f6f678478a37926a4dea73ffb73d3dcf1c89f5241\"" Jul 11 00:29:07.150809 env[1210]: time="2025-07-11T00:29:07.150768587Z" level=info msg="CreateContainer within sandbox \"0f29efb97eefcf88768294f6bb3d0bf5080600dcd90cf895f606d79287c429f3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0a805a7bf01ef879ca7dcd25cc0b213688334db91ad9caa4ed92603a865124f8\"" Jul 11 00:29:07.151239 env[1210]: time="2025-07-11T00:29:07.151196776Z" level=info msg="StartContainer for \"0a805a7bf01ef879ca7dcd25cc0b213688334db91ad9caa4ed92603a865124f8\"" Jul 11 00:29:07.151897 env[1210]: time="2025-07-11T00:29:07.151850270Z" level=info msg="CreateContainer within sandbox \"e2d45ba1931cbf4a96010fb9a3b64950ecd881934c5e0e58c079b210aa55fc7d\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"48e2e29214884c8b1808a8376e93591601309e5ced59f88283d7416d214dd018\"" Jul 11 00:29:07.152254 env[1210]: time="2025-07-11T00:29:07.152218677Z" level=info msg="StartContainer for \"48e2e29214884c8b1808a8376e93591601309e5ced59f88283d7416d214dd018\"" Jul 11 00:29:07.167615 systemd[1]: Started cri-containerd-0a805a7bf01ef879ca7dcd25cc0b213688334db91ad9caa4ed92603a865124f8.scope. Jul 11 00:29:07.171102 systemd[1]: Started cri-containerd-66b68b279c2468ed0cfb681f6f678478a37926a4dea73ffb73d3dcf1c89f5241.scope. Jul 11 00:29:07.176466 systemd[1]: Started cri-containerd-48e2e29214884c8b1808a8376e93591601309e5ced59f88283d7416d214dd018.scope. Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.204000 audit: BPF prog-id=73 op=LOAD Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1657 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438653265323932313438383463386231383038613833373665393335 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1657 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438653265323932313438383463386231383038613833373665393335 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit: BPF prog-id=74 op=LOAD Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1656 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636623638623237396332343638656430636662363831663666363738 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1656 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636623638623237396332343638656430636662363831663666363738 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit: BPF prog-id=75 op=LOAD Jul 11 00:29:07.206000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1656 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636623638623237396332343638656430636662363831663666363738 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit: BPF prog-id=76 op=LOAD Jul 11 00:29:07.206000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1656 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636623638623237396332343638656430636662363831663666363738 Jul 11 00:29:07.206000 audit: BPF prog-id=76 op=UNLOAD Jul 11 00:29:07.206000 audit: BPF prog-id=75 op=UNLOAD Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.206000 audit: BPF prog-id=77 op=LOAD Jul 11 00:29:07.206000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1656 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636623638623237396332343638656430636662363831663666363738 Jul 11 00:29:07.205000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.205000 audit: BPF prog-id=78 op=LOAD Jul 11 00:29:07.205000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1657 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438653265323932313438383463386231383038613833373665393335 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit: BPF prog-id=79 op=LOAD Jul 11 00:29:07.208000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1657 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438653265323932313438383463386231383038613833373665393335 Jul 11 00:29:07.208000 audit: BPF prog-id=79 op=UNLOAD Jul 11 00:29:07.208000 audit: BPF prog-id=78 op=UNLOAD Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.208000 audit: BPF prog-id=80 op=LOAD Jul 11 00:29:07.208000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1657 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438653265323932313438383463386231383038613833373665393335 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.212000 audit: BPF prog-id=81 op=LOAD Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061383035613762663031656638373963613764636432356363306232 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061383035613762663031656638373963613764636432356363306232 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.213000 audit: BPF prog-id=82 op=LOAD Jul 11 00:29:07.213000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061383035613762663031656638373963613764636432356363306232 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit: BPF prog-id=83 op=LOAD Jul 11 00:29:07.214000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061383035613762663031656638373963613764636432356363306232 Jul 11 00:29:07.214000 audit: BPF prog-id=83 op=UNLOAD Jul 11 00:29:07.214000 audit: BPF prog-id=82 op=UNLOAD Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:07.214000 audit: BPF prog-id=84 op=LOAD Jul 11 00:29:07.214000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:07.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061383035613762663031656638373963613764636432356363306232 Jul 11 00:29:07.249439 env[1210]: time="2025-07-11T00:29:07.244558348Z" level=info msg="StartContainer for \"66b68b279c2468ed0cfb681f6f678478a37926a4dea73ffb73d3dcf1c89f5241\" returns successfully" Jul 11 00:29:07.256796 env[1210]: time="2025-07-11T00:29:07.256730244Z" level=info msg="StartContainer for \"48e2e29214884c8b1808a8376e93591601309e5ced59f88283d7416d214dd018\" returns successfully" Jul 11 00:29:07.267464 env[1210]: time="2025-07-11T00:29:07.264016421Z" level=info msg="StartContainer for \"0a805a7bf01ef879ca7dcd25cc0b213688334db91ad9caa4ed92603a865124f8\" returns successfully" Jul 11 00:29:07.284068 kubelet[1603]: W0711 00:29:07.283893 1603 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Jul 11 00:29:07.284068 kubelet[1603]: E0711 00:29:07.283957 1603 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.65:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.65:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:29:07.293153 kubelet[1603]: E0711 00:29:07.291642 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.65:6443: connect: connection refused" interval="1.6s" Jul 11 00:29:07.449070 kubelet[1603]: I0711 00:29:07.448970 1603 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 11 00:29:07.913564 kubelet[1603]: E0711 00:29:07.913539 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:07.915907 kubelet[1603]: E0711 00:29:07.915882 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:07.916669 kubelet[1603]: E0711 00:29:07.916649 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:08.918560 kubelet[1603]: E0711 00:29:08.918526 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:09.393000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.393000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.393000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004d056e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.393000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4008b1cb80 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.394000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.394000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004d05740 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.394000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7312 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.394000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4005886090 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.422097 kernel: kauditd_printk_skb: 571 callbacks suppressed Jul 11 00:29:09.422182 kernel: audit: type=1400 audit(1752193749.418:547): avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.418000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.425029 kernel: audit: type=1300 audit(1752193749.418:547): arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4008b1db00 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.418000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4008b1db00 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.434602 kernel: audit: type=1327 audit(1752193749.418:547): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.434643 kernel: audit: type=1400 audit(1752193749.424:548): avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.434660 kernel: audit: type=1300 audit(1752193749.424:548): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40049fa450 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.434686 kernel: audit: type=1327 audit(1752193749.424:548): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.418000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.424000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.424000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40049fa450 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:29:09.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:29:09.452232 kubelet[1603]: E0711 00:29:09.452186 1603 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 11 00:29:09.558957 kubelet[1603]: I0711 00:29:09.558910 1603 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 11 00:29:09.707000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.707000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.712535 kernel: audit: type=1400 audit(1752193749.707:549): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.712593 kernel: audit: type=1400 audit(1752193749.707:550): avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:09.712610 kernel: audit: type=1300 audit(1752193749.707:550): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000a92020 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:09.707000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000a92020 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:09.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:09.717624 kernel: audit: type=1327 audit(1752193749.707:550): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:09.707000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000479c50 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:09.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:09.858484 kubelet[1603]: I0711 00:29:09.858435 1603 apiserver.go:52] "Watching apiserver" Jul 11 00:29:09.889500 kubelet[1603]: I0711 00:29:09.889466 1603 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 11 00:29:11.655171 kubelet[1603]: E0711 00:29:11.655131 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:11.770180 systemd[1]: Reloading. Jul 11 00:29:11.818670 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-07-11T00:29:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:29:11.818701 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-07-11T00:29:11Z" level=info msg="torcx already run" Jul 11 00:29:11.922352 kubelet[1603]: E0711 00:29:11.922255 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:11.944574 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:29:11.944740 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:29:11.944000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:11.944000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000b81f20 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:11.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:11.945000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:11.945000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000b81f60 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:11.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:11.945000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:11.945000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000b81fa0 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:11.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:11.945000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:29:11.945000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000b81fe0 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:11.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:11.963332 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:29:11.980000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 11 00:29:11.980000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40009f4180 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:29:11.980000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit: BPF prog-id=85 op=LOAD Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.027000 audit: BPF prog-id=86 op=LOAD Jul 11 00:29:12.027000 audit: BPF prog-id=46 op=UNLOAD Jul 11 00:29:12.027000 audit: BPF prog-id=47 op=UNLOAD Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit: BPF prog-id=87 op=LOAD Jul 11 00:29:12.028000 audit: BPF prog-id=48 op=UNLOAD Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit: BPF prog-id=88 op=LOAD Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit: BPF prog-id=89 op=LOAD Jul 11 00:29:12.029000 audit: BPF prog-id=49 op=UNLOAD Jul 11 00:29:12.029000 audit: BPF prog-id=50 op=UNLOAD Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit: BPF prog-id=90 op=LOAD Jul 11 00:29:12.030000 audit: BPF prog-id=73 op=UNLOAD Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit: BPF prog-id=91 op=LOAD Jul 11 00:29:12.030000 audit: BPF prog-id=51 op=UNLOAD Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit: BPF prog-id=92 op=LOAD Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.030000 audit: BPF prog-id=93 op=LOAD Jul 11 00:29:12.030000 audit: BPF prog-id=52 op=UNLOAD Jul 11 00:29:12.030000 audit: BPF prog-id=53 op=UNLOAD Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.031000 audit: BPF prog-id=94 op=LOAD Jul 11 00:29:12.031000 audit: BPF prog-id=74 op=UNLOAD Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.032000 audit: BPF prog-id=95 op=LOAD Jul 11 00:29:12.032000 audit: BPF prog-id=54 op=UNLOAD Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.034000 audit: BPF prog-id=96 op=LOAD Jul 11 00:29:12.034000 audit: BPF prog-id=67 op=UNLOAD Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.035000 audit: BPF prog-id=97 op=LOAD Jul 11 00:29:12.035000 audit: BPF prog-id=55 op=UNLOAD Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit: BPF prog-id=98 op=LOAD Jul 11 00:29:12.037000 audit: BPF prog-id=56 op=UNLOAD Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit: BPF prog-id=99 op=LOAD Jul 11 00:29:12.037000 audit: BPF prog-id=65 op=UNLOAD Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.037000 audit: BPF prog-id=100 op=LOAD Jul 11 00:29:12.037000 audit: BPF prog-id=81 op=UNLOAD Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit: BPF prog-id=101 op=LOAD Jul 11 00:29:12.038000 audit: BPF prog-id=57 op=UNLOAD Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.038000 audit: BPF prog-id=102 op=LOAD Jul 11 00:29:12.038000 audit: BPF prog-id=61 op=UNLOAD Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit: BPF prog-id=103 op=LOAD Jul 11 00:29:12.039000 audit: BPF prog-id=58 op=UNLOAD Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit: BPF prog-id=104 op=LOAD Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.039000 audit: BPF prog-id=105 op=LOAD Jul 11 00:29:12.039000 audit: BPF prog-id=59 op=UNLOAD Jul 11 00:29:12.039000 audit: BPF prog-id=60 op=UNLOAD Jul 11 00:29:12.057247 systemd[1]: Stopping kubelet.service... Jul 11 00:29:12.084696 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:29:12.084889 systemd[1]: Stopped kubelet.service. Jul 11 00:29:12.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:12.084960 systemd[1]: kubelet.service: Consumed 1.463s CPU time. Jul 11 00:29:12.087088 systemd[1]: Starting kubelet.service... Jul 11 00:29:12.190856 systemd[1]: Started kubelet.service. Jul 11 00:29:12.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:12.230597 kubelet[1948]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:29:12.230924 kubelet[1948]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 11 00:29:12.230970 kubelet[1948]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:29:12.231105 kubelet[1948]: I0711 00:29:12.231073 1948 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:29:12.237727 kubelet[1948]: I0711 00:29:12.237689 1948 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 11 00:29:12.237727 kubelet[1948]: I0711 00:29:12.237720 1948 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:29:12.237994 kubelet[1948]: I0711 00:29:12.237975 1948 server.go:934] "Client rotation is on, will bootstrap in background" Jul 11 00:29:12.240113 kubelet[1948]: I0711 00:29:12.239583 1948 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 11 00:29:12.247081 kubelet[1948]: I0711 00:29:12.247036 1948 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:29:12.253950 kubelet[1948]: E0711 00:29:12.253902 1948 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:29:12.254100 kubelet[1948]: I0711 00:29:12.254084 1948 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:29:12.256649 kubelet[1948]: I0711 00:29:12.256621 1948 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:29:12.258985 kubelet[1948]: I0711 00:29:12.258953 1948 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 11 00:29:12.259129 kubelet[1948]: I0711 00:29:12.259084 1948 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:29:12.259394 kubelet[1948]: I0711 00:29:12.259130 1948 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:29:12.259394 kubelet[1948]: I0711 00:29:12.259419 1948 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:29:12.259394 kubelet[1948]: I0711 00:29:12.259429 1948 container_manager_linux.go:300] "Creating device plugin manager" Jul 11 00:29:12.259589 kubelet[1948]: I0711 00:29:12.259470 1948 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:29:12.259589 kubelet[1948]: I0711 00:29:12.259564 1948 kubelet.go:408] "Attempting to sync node with API server" Jul 11 00:29:12.259589 kubelet[1948]: I0711 00:29:12.259578 1948 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:29:12.259651 kubelet[1948]: I0711 00:29:12.259601 1948 kubelet.go:314] "Adding apiserver pod source" Jul 11 00:29:12.259651 kubelet[1948]: I0711 00:29:12.259616 1948 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:29:12.261847 kubelet[1948]: I0711 00:29:12.261817 1948 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:29:12.262517 kubelet[1948]: I0711 00:29:12.262493 1948 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 11 00:29:12.263429 kubelet[1948]: I0711 00:29:12.263406 1948 server.go:1274] "Started kubelet" Jul 11 00:29:12.265175 kubelet[1948]: I0711 00:29:12.265135 1948 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:29:12.265000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.265000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:29:12.265000 audit[1948]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d2aa50 a1=4000d21368 a2=4000d2aa20 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:12.265000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:29:12.265000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.265000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:29:12.265000 audit[1948]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d286c0 a1=4000d21380 a2=4000d2aae0 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:12.265000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:29:12.267149 kubelet[1948]: I0711 00:29:12.266825 1948 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:29:12.267149 kubelet[1948]: I0711 00:29:12.266835 1948 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:29:12.267149 kubelet[1948]: I0711 00:29:12.266879 1948 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 11 00:29:12.267149 kubelet[1948]: I0711 00:29:12.266944 1948 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:29:12.349480 kubelet[1948]: I0711 00:29:12.349444 1948 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:29:12.350481 kubelet[1948]: I0711 00:29:12.350461 1948 server.go:449] "Adding debug handlers to kubelet server" Jul 11 00:29:12.351507 kubelet[1948]: I0711 00:29:12.351483 1948 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:29:12.352391 kubelet[1948]: I0711 00:29:12.352370 1948 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 11 00:29:12.352628 kubelet[1948]: I0711 00:29:12.352604 1948 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 11 00:29:12.352739 kubelet[1948]: I0711 00:29:12.352725 1948 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:29:12.354122 kubelet[1948]: I0711 00:29:12.354103 1948 factory.go:221] Registration of the systemd container factory successfully Jul 11 00:29:12.354361 kubelet[1948]: I0711 00:29:12.354340 1948 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:29:12.354633 kubelet[1948]: E0711 00:29:12.354124 1948 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 11 00:29:12.355717 kubelet[1948]: I0711 00:29:12.355685 1948 factory.go:221] Registration of the containerd container factory successfully Jul 11 00:29:12.364411 kubelet[1948]: I0711 00:29:12.364259 1948 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 11 00:29:12.365898 kubelet[1948]: I0711 00:29:12.365858 1948 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 11 00:29:12.366002 kubelet[1948]: I0711 00:29:12.365989 1948 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 11 00:29:12.366094 kubelet[1948]: I0711 00:29:12.366083 1948 kubelet.go:2321] "Starting kubelet main sync loop" Jul 11 00:29:12.366215 kubelet[1948]: E0711 00:29:12.366193 1948 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:29:12.404588 kubelet[1948]: I0711 00:29:12.404559 1948 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 11 00:29:12.404588 kubelet[1948]: I0711 00:29:12.404579 1948 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 11 00:29:12.404588 kubelet[1948]: I0711 00:29:12.404600 1948 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:29:12.404753 kubelet[1948]: I0711 00:29:12.404739 1948 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 11 00:29:12.404780 kubelet[1948]: I0711 00:29:12.404750 1948 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 11 00:29:12.404780 kubelet[1948]: I0711 00:29:12.404768 1948 policy_none.go:49] "None policy: Start" Jul 11 00:29:12.405424 kubelet[1948]: I0711 00:29:12.405381 1948 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 11 00:29:12.405486 kubelet[1948]: I0711 00:29:12.405442 1948 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:29:12.405650 kubelet[1948]: I0711 00:29:12.405587 1948 state_mem.go:75] "Updated machine memory state" Jul 11 00:29:12.409823 kubelet[1948]: I0711 00:29:12.409799 1948 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 11 00:29:12.408000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:12.408000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:29:12.408000 audit[1948]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cd6630 a1=4001067200 a2=4000cd6600 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:12.408000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:29:12.410084 kubelet[1948]: I0711 00:29:12.409897 1948 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 11 00:29:12.410084 kubelet[1948]: I0711 00:29:12.410062 1948 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:29:12.410145 kubelet[1948]: I0711 00:29:12.410074 1948 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:29:12.410382 kubelet[1948]: I0711 00:29:12.410355 1948 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:29:12.475923 kubelet[1948]: E0711 00:29:12.475801 1948 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:12.517081 kubelet[1948]: I0711 00:29:12.517042 1948 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 11 00:29:12.523892 kubelet[1948]: I0711 00:29:12.523862 1948 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 11 00:29:12.524006 kubelet[1948]: I0711 00:29:12.523935 1948 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 11 00:29:12.553793 kubelet[1948]: I0711 00:29:12.553743 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:12.553793 kubelet[1948]: I0711 00:29:12.553779 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:29:12.553793 kubelet[1948]: I0711 00:29:12.553799 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/559d2209b86d0ae299b08669643e3dd9-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"559d2209b86d0ae299b08669643e3dd9\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:12.554028 kubelet[1948]: I0711 00:29:12.553814 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:12.554028 kubelet[1948]: I0711 00:29:12.553848 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:12.554028 kubelet[1948]: I0711 00:29:12.553863 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:12.554028 kubelet[1948]: I0711 00:29:12.553879 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:29:12.554028 kubelet[1948]: I0711 00:29:12.553894 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/559d2209b86d0ae299b08669643e3dd9-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"559d2209b86d0ae299b08669643e3dd9\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:12.554154 kubelet[1948]: I0711 00:29:12.553909 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/559d2209b86d0ae299b08669643e3dd9-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"559d2209b86d0ae299b08669643e3dd9\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:12.776624 kubelet[1948]: E0711 00:29:12.776516 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:12.776624 kubelet[1948]: E0711 00:29:12.776548 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:12.776624 kubelet[1948]: E0711 00:29:12.776521 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:13.260705 kubelet[1948]: I0711 00:29:13.260626 1948 apiserver.go:52] "Watching apiserver" Jul 11 00:29:13.352770 kubelet[1948]: I0711 00:29:13.352730 1948 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 11 00:29:13.383757 kubelet[1948]: E0711 00:29:13.383724 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:13.384375 kubelet[1948]: E0711 00:29:13.384242 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:13.395205 kubelet[1948]: E0711 00:29:13.395171 1948 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:29:13.395531 kubelet[1948]: E0711 00:29:13.395510 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:13.413822 kubelet[1948]: I0711 00:29:13.413749 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.41373096 podStartE2EDuration="2.41373096s" podCreationTimestamp="2025-07-11 00:29:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:13.406635291 +0000 UTC m=+1.210934758" watchObservedRunningTime="2025-07-11 00:29:13.41373096 +0000 UTC m=+1.218030427" Jul 11 00:29:13.422781 kubelet[1948]: I0711 00:29:13.422699 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.422685351 podStartE2EDuration="1.422685351s" podCreationTimestamp="2025-07-11 00:29:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:13.41398769 +0000 UTC m=+1.218287157" watchObservedRunningTime="2025-07-11 00:29:13.422685351 +0000 UTC m=+1.226984778" Jul 11 00:29:13.430862 kubelet[1948]: I0711 00:29:13.430761 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.430744207 podStartE2EDuration="1.430744207s" podCreationTimestamp="2025-07-11 00:29:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:13.422685351 +0000 UTC m=+1.226984818" watchObservedRunningTime="2025-07-11 00:29:13.430744207 +0000 UTC m=+1.235043674" Jul 11 00:29:14.385250 kubelet[1948]: E0711 00:29:14.385204 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:15.386085 kubelet[1948]: E0711 00:29:15.386049 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:16.412199 kubelet[1948]: I0711 00:29:16.412163 1948 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 11 00:29:16.412862 env[1210]: time="2025-07-11T00:29:16.412826935Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 11 00:29:16.413107 kubelet[1948]: I0711 00:29:16.413007 1948 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 11 00:29:16.962905 systemd[1]: Created slice kubepods-besteffort-podcafb7d43_8c0b_401a_9667_6207ebaba0d9.slice. Jul 11 00:29:16.981675 kubelet[1948]: I0711 00:29:16.981512 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/cafb7d43-8c0b-401a-9667-6207ebaba0d9-kube-proxy\") pod \"kube-proxy-fgcxg\" (UID: \"cafb7d43-8c0b-401a-9667-6207ebaba0d9\") " pod="kube-system/kube-proxy-fgcxg" Jul 11 00:29:16.981675 kubelet[1948]: I0711 00:29:16.981553 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cafb7d43-8c0b-401a-9667-6207ebaba0d9-lib-modules\") pod \"kube-proxy-fgcxg\" (UID: \"cafb7d43-8c0b-401a-9667-6207ebaba0d9\") " pod="kube-system/kube-proxy-fgcxg" Jul 11 00:29:16.981675 kubelet[1948]: I0711 00:29:16.981572 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cafb7d43-8c0b-401a-9667-6207ebaba0d9-xtables-lock\") pod \"kube-proxy-fgcxg\" (UID: \"cafb7d43-8c0b-401a-9667-6207ebaba0d9\") " pod="kube-system/kube-proxy-fgcxg" Jul 11 00:29:16.981675 kubelet[1948]: I0711 00:29:16.981587 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kmbpj\" (UniqueName: \"kubernetes.io/projected/cafb7d43-8c0b-401a-9667-6207ebaba0d9-kube-api-access-kmbpj\") pod \"kube-proxy-fgcxg\" (UID: \"cafb7d43-8c0b-401a-9667-6207ebaba0d9\") " pod="kube-system/kube-proxy-fgcxg" Jul 11 00:29:17.089789 kubelet[1948]: E0711 00:29:17.089755 1948 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 11 00:29:17.089947 kubelet[1948]: E0711 00:29:17.089934 1948 projected.go:194] Error preparing data for projected volume kube-api-access-kmbpj for pod kube-system/kube-proxy-fgcxg: configmap "kube-root-ca.crt" not found Jul 11 00:29:17.090063 kubelet[1948]: E0711 00:29:17.090049 1948 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/cafb7d43-8c0b-401a-9667-6207ebaba0d9-kube-api-access-kmbpj podName:cafb7d43-8c0b-401a-9667-6207ebaba0d9 nodeName:}" failed. No retries permitted until 2025-07-11 00:29:17.590029333 +0000 UTC m=+5.394328800 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-kmbpj" (UniqueName: "kubernetes.io/projected/cafb7d43-8c0b-401a-9667-6207ebaba0d9-kube-api-access-kmbpj") pod "kube-proxy-fgcxg" (UID: "cafb7d43-8c0b-401a-9667-6207ebaba0d9") : configmap "kube-root-ca.crt" not found Jul 11 00:29:17.574279 kubelet[1948]: E0711 00:29:17.574243 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:17.578587 systemd[1]: Created slice kubepods-besteffort-pod57244e6e_ab0e_4a92_812d_31844741252d.slice. Jul 11 00:29:17.585307 kubelet[1948]: I0711 00:29:17.585275 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lmlhs\" (UniqueName: \"kubernetes.io/projected/57244e6e-ab0e-4a92-812d-31844741252d-kube-api-access-lmlhs\") pod \"tigera-operator-5bf8dfcb4-dhj2c\" (UID: \"57244e6e-ab0e-4a92-812d-31844741252d\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-dhj2c" Jul 11 00:29:17.585441 kubelet[1948]: I0711 00:29:17.585309 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/57244e6e-ab0e-4a92-812d-31844741252d-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-dhj2c\" (UID: \"57244e6e-ab0e-4a92-812d-31844741252d\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-dhj2c" Jul 11 00:29:17.687146 kubelet[1948]: I0711 00:29:17.687111 1948 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 11 00:29:17.872481 kubelet[1948]: E0711 00:29:17.872453 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:17.873176 env[1210]: time="2025-07-11T00:29:17.873108012Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fgcxg,Uid:cafb7d43-8c0b-401a-9667-6207ebaba0d9,Namespace:kube-system,Attempt:0,}" Jul 11 00:29:17.882280 env[1210]: time="2025-07-11T00:29:17.881480386Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-dhj2c,Uid:57244e6e-ab0e-4a92-812d-31844741252d,Namespace:tigera-operator,Attempt:0,}" Jul 11 00:29:17.887585 env[1210]: time="2025-07-11T00:29:17.887519361Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:17.887728 env[1210]: time="2025-07-11T00:29:17.887563201Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:17.887728 env[1210]: time="2025-07-11T00:29:17.887573720Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:17.887925 env[1210]: time="2025-07-11T00:29:17.887856076Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fec457c38eb2962a17caec50bb58c715cbba2479563d1c958fb6c920c0777bde pid=2006 runtime=io.containerd.runc.v2 Jul 11 00:29:17.896249 env[1210]: time="2025-07-11T00:29:17.896178971Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:17.896366 env[1210]: time="2025-07-11T00:29:17.896264569Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:17.896366 env[1210]: time="2025-07-11T00:29:17.896291649Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:17.897315 env[1210]: time="2025-07-11T00:29:17.897244232Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eaf8060f087eb990ed2d5d690ec4db99868509a8c1e33ea3676f7e40bf813b57 pid=2030 runtime=io.containerd.runc.v2 Jul 11 00:29:17.900298 systemd[1]: Started cri-containerd-fec457c38eb2962a17caec50bb58c715cbba2479563d1c958fb6c920c0777bde.scope. Jul 11 00:29:17.912148 systemd[1]: Started cri-containerd-eaf8060f087eb990ed2d5d690ec4db99868509a8c1e33ea3676f7e40bf813b57.scope. Jul 11 00:29:17.929491 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 11 00:29:17.929594 kernel: audit: type=1400 audit(1752193757.924:805): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.929623 kernel: audit: type=1400 audit(1752193757.924:806): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.929647 kernel: audit: type=1400 audit(1752193757.924:807): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.930528 kernel: audit: type=1400 audit(1752193757.924:808): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.933960 kernel: audit: type=1400 audit(1752193757.924:809): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.934022 kernel: audit: type=1400 audit(1752193757.924:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.937410 kernel: audit: type=1400 audit(1752193757.924:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.937462 kernel: audit: type=1400 audit(1752193757.924:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.940720 kernel: audit: type=1400 audit(1752193757.924:813): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.940787 kernel: audit: type=1400 audit(1752193757.925:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit: BPF prog-id=106 op=LOAD Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2006 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665633435376333386562323936326131376361656335306262353863 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2006 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665633435376333386562323936326131376361656335306262353863 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.925000 audit: BPF prog-id=107 op=LOAD Jul 11 00:29:17.925000 audit[2016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2006 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665633435376333386562323936326131376361656335306262353863 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.926000 audit: BPF prog-id=108 op=LOAD Jul 11 00:29:17.926000 audit[2016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2006 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665633435376333386562323936326131376361656335306262353863 Jul 11 00:29:17.928000 audit: BPF prog-id=108 op=UNLOAD Jul 11 00:29:17.928000 audit: BPF prog-id=107 op=UNLOAD Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.928000 audit: BPF prog-id=109 op=LOAD Jul 11 00:29:17.928000 audit[2016]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2006 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665633435376333386562323936326131376361656335306262353863 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.942000 audit: BPF prog-id=110 op=LOAD Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2030 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663830363066303837656239393065643264356436393065633464 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2030 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663830363066303837656239393065643264356436393065633464 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit: BPF prog-id=111 op=LOAD Jul 11 00:29:17.943000 audit[2045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2030 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663830363066303837656239393065643264356436393065633464 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit: BPF prog-id=112 op=LOAD Jul 11 00:29:17.943000 audit[2045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2030 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663830363066303837656239393065643264356436393065633464 Jul 11 00:29:17.943000 audit: BPF prog-id=112 op=UNLOAD Jul 11 00:29:17.943000 audit: BPF prog-id=111 op=UNLOAD Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { perfmon } for pid=2045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit[2045]: AVC avc: denied { bpf } for pid=2045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:17.943000 audit: BPF prog-id=113 op=LOAD Jul 11 00:29:17.943000 audit[2045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2030 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:17.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663830363066303837656239393065643264356436393065633464 Jul 11 00:29:17.951829 env[1210]: time="2025-07-11T00:29:17.951784045Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fgcxg,Uid:cafb7d43-8c0b-401a-9667-6207ebaba0d9,Namespace:kube-system,Attempt:0,} returns sandbox id \"fec457c38eb2962a17caec50bb58c715cbba2479563d1c958fb6c920c0777bde\"" Jul 11 00:29:17.952334 kubelet[1948]: E0711 00:29:17.952314 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:17.955441 env[1210]: time="2025-07-11T00:29:17.954567197Z" level=info msg="CreateContainer within sandbox \"fec457c38eb2962a17caec50bb58c715cbba2479563d1c958fb6c920c0777bde\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 11 00:29:17.967410 env[1210]: time="2025-07-11T00:29:17.967371574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-dhj2c,Uid:57244e6e-ab0e-4a92-812d-31844741252d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"eaf8060f087eb990ed2d5d690ec4db99868509a8c1e33ea3676f7e40bf813b57\"" Jul 11 00:29:17.969351 env[1210]: time="2025-07-11T00:29:17.969320501Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 11 00:29:17.970945 env[1210]: time="2025-07-11T00:29:17.970909673Z" level=info msg="CreateContainer within sandbox \"fec457c38eb2962a17caec50bb58c715cbba2479563d1c958fb6c920c0777bde\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"fb7e9f73b75fb55fa88d6478135710ac8c2b9957a7f9baa0bb75af20afc19643\"" Jul 11 00:29:17.971491 env[1210]: time="2025-07-11T00:29:17.971458103Z" level=info msg="StartContainer for \"fb7e9f73b75fb55fa88d6478135710ac8c2b9957a7f9baa0bb75af20afc19643\"" Jul 11 00:29:17.991909 systemd[1]: Started cri-containerd-fb7e9f73b75fb55fa88d6478135710ac8c2b9957a7f9baa0bb75af20afc19643.scope. Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2006 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662376539663733623735666235356661383864363437383133353731 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.018000 audit: BPF prog-id=114 op=LOAD Jul 11 00:29:18.018000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2006 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662376539663733623735666235356661383864363437383133353731 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit: BPF prog-id=115 op=LOAD Jul 11 00:29:18.019000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2006 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662376539663733623735666235356661383864363437383133353731 Jul 11 00:29:18.019000 audit: BPF prog-id=115 op=UNLOAD Jul 11 00:29:18.019000 audit: BPF prog-id=114 op=UNLOAD Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { perfmon } for pid=2089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit[2089]: AVC avc: denied { bpf } for pid=2089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:18.019000 audit: BPF prog-id=116 op=LOAD Jul 11 00:29:18.019000 audit[2089]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2006 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662376539663733623735666235356661383864363437383133353731 Jul 11 00:29:18.034656 env[1210]: time="2025-07-11T00:29:18.034606159Z" level=info msg="StartContainer for \"fb7e9f73b75fb55fa88d6478135710ac8c2b9957a7f9baa0bb75af20afc19643\" returns successfully" Jul 11 00:29:18.230000 audit[2152]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.230000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6267f40 a2=0 a3=1 items=0 ppid=2100 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.230000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:29:18.231000 audit[2153]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.231000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd196ae10 a2=0 a3=1 items=0 ppid=2100 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.231000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:29:18.232000 audit[2154]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.232000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe92f2a70 a2=0 a3=1 items=0 ppid=2100 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:29:18.233000 audit[2155]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.233000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd946ecf0 a2=0 a3=1 items=0 ppid=2100 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.233000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:29:18.235000 audit[2156]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.235000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd603b9c0 a2=0 a3=1 items=0 ppid=2100 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.235000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:29:18.236000 audit[2157]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.236000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7448bb0 a2=0 a3=1 items=0 ppid=2100 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.236000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:29:18.335000 audit[2158]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.335000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd676d430 a2=0 a3=1 items=0 ppid=2100 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:29:18.339000 audit[2160]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.339000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffff73c060 a2=0 a3=1 items=0 ppid=2100 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 11 00:29:18.342000 audit[2163]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.342000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe1375d20 a2=0 a3=1 items=0 ppid=2100 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 11 00:29:18.343000 audit[2164]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.343000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff496f570 a2=0 a3=1 items=0 ppid=2100 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.343000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:29:18.345000 audit[2166]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.345000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff73ba400 a2=0 a3=1 items=0 ppid=2100 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:29:18.346000 audit[2167]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.346000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc88acd90 a2=0 a3=1 items=0 ppid=2100 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.346000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:29:18.349000 audit[2169]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.349000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd40c6310 a2=0 a3=1 items=0 ppid=2100 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:29:18.352000 audit[2172]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.352000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdf3524e0 a2=0 a3=1 items=0 ppid=2100 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.352000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 11 00:29:18.353000 audit[2173]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.353000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9583340 a2=0 a3=1 items=0 ppid=2100 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:29:18.355000 audit[2175]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.355000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdb103700 a2=0 a3=1 items=0 ppid=2100 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:29:18.356000 audit[2176]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.356000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff1ccb820 a2=0 a3=1 items=0 ppid=2100 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:29:18.359000 audit[2178]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.359000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc78d08a0 a2=0 a3=1 items=0 ppid=2100 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.359000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:29:18.362000 audit[2181]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.362000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff69a0f90 a2=0 a3=1 items=0 ppid=2100 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:29:18.365000 audit[2184]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.365000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd831def0 a2=0 a3=1 items=0 ppid=2100 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.365000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:29:18.366000 audit[2185]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.366000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff15b1820 a2=0 a3=1 items=0 ppid=2100 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.366000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:29:18.369000 audit[2187]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.369000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd8edf510 a2=0 a3=1 items=0 ppid=2100 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.369000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:29:18.372000 audit[2190]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.372000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe818dd60 a2=0 a3=1 items=0 ppid=2100 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.372000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:29:18.373000 audit[2191]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.373000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb8b2820 a2=0 a3=1 items=0 ppid=2100 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.373000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:29:18.376000 audit[2193]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:29:18.376000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff03086f0 a2=0 a3=1 items=0 ppid=2100 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.376000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:29:18.394216 kubelet[1948]: E0711 00:29:18.394190 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:18.395823 kubelet[1948]: E0711 00:29:18.395801 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:18.403428 kubelet[1948]: I0711 00:29:18.403370 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-fgcxg" podStartSLOduration=2.403356348 podStartE2EDuration="2.403356348s" podCreationTimestamp="2025-07-11 00:29:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:18.403099712 +0000 UTC m=+6.207399219" watchObservedRunningTime="2025-07-11 00:29:18.403356348 +0000 UTC m=+6.207655815" Jul 11 00:29:18.409000 audit[2199]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:18.409000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffeff1ac30 a2=0 a3=1 items=0 ppid=2100 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.409000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:18.426000 audit[2199]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:18.426000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffeff1ac30 a2=0 a3=1 items=0 ppid=2100 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.426000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:18.429000 audit[2204]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.429000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd7bdcc70 a2=0 a3=1 items=0 ppid=2100 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:29:18.431000 audit[2206]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.431000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe8100630 a2=0 a3=1 items=0 ppid=2100 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 11 00:29:18.435000 audit[2209]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.435000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcdbbf8a0 a2=0 a3=1 items=0 ppid=2100 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 11 00:29:18.435000 audit[2210]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.435000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd76667a0 a2=0 a3=1 items=0 ppid=2100 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:29:18.438000 audit[2212]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.438000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd1cb13c0 a2=0 a3=1 items=0 ppid=2100 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.438000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:29:18.440000 audit[2213]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.440000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe68cc620 a2=0 a3=1 items=0 ppid=2100 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:29:18.443000 audit[2215]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.443000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc9c79370 a2=0 a3=1 items=0 ppid=2100 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 11 00:29:18.446000 audit[2218]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.446000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd10c59e0 a2=0 a3=1 items=0 ppid=2100 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:29:18.447000 audit[2219]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.447000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe590adc0 a2=0 a3=1 items=0 ppid=2100 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:29:18.450000 audit[2221]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.450000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6891b90 a2=0 a3=1 items=0 ppid=2100 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.450000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:29:18.451000 audit[2222]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.451000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7f399c0 a2=0 a3=1 items=0 ppid=2100 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.451000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:29:18.453000 audit[2224]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.453000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd42c3180 a2=0 a3=1 items=0 ppid=2100 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:29:18.457000 audit[2227]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.457000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd46e8d30 a2=0 a3=1 items=0 ppid=2100 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:29:18.460000 audit[2230]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.460000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff1817590 a2=0 a3=1 items=0 ppid=2100 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.460000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 11 00:29:18.461000 audit[2231]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.461000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc6727610 a2=0 a3=1 items=0 ppid=2100 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.461000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:29:18.463000 audit[2233]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.463000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffde790340 a2=0 a3=1 items=0 ppid=2100 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.463000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:29:18.466000 audit[2236]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.466000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff2fcb880 a2=0 a3=1 items=0 ppid=2100 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.466000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:29:18.467000 audit[2237]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.467000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb991290 a2=0 a3=1 items=0 ppid=2100 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.467000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:29:18.469000 audit[2239]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.469000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe7a53130 a2=0 a3=1 items=0 ppid=2100 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.469000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:29:18.470000 audit[2240]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.470000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeec12ec0 a2=0 a3=1 items=0 ppid=2100 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.470000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:29:18.472000 audit[2242]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.472000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff5796720 a2=0 a3=1 items=0 ppid=2100 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:29:18.475000 audit[2245]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:29:18.475000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffef5a68c0 a2=0 a3=1 items=0 ppid=2100 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.475000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:29:18.478000 audit[2247]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:29:18.478000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffe83bcc40 a2=0 a3=1 items=0 ppid=2100 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.478000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:18.478000 audit[2247]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:29:18.478000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe83bcc40 a2=0 a3=1 items=0 ppid=2100 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:18.478000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:19.350864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4200048286.mount: Deactivated successfully. Jul 11 00:29:19.889044 env[1210]: time="2025-07-11T00:29:19.888992926Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:19.891198 env[1210]: time="2025-07-11T00:29:19.891149012Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:19.892508 env[1210]: time="2025-07-11T00:29:19.892474152Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:19.893885 env[1210]: time="2025-07-11T00:29:19.893849490Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:19.894459 env[1210]: time="2025-07-11T00:29:19.894433081Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 11 00:29:19.897320 env[1210]: time="2025-07-11T00:29:19.897281317Z" level=info msg="CreateContainer within sandbox \"eaf8060f087eb990ed2d5d690ec4db99868509a8c1e33ea3676f7e40bf813b57\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 11 00:29:19.909148 env[1210]: time="2025-07-11T00:29:19.909104054Z" level=info msg="CreateContainer within sandbox \"eaf8060f087eb990ed2d5d690ec4db99868509a8c1e33ea3676f7e40bf813b57\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"8a01f84f8a92cee17bf749aed20e482b3b3728822fc08eb5314baef1fd7dc66d\"" Jul 11 00:29:19.910423 env[1210]: time="2025-07-11T00:29:19.909540247Z" level=info msg="StartContainer for \"8a01f84f8a92cee17bf749aed20e482b3b3728822fc08eb5314baef1fd7dc66d\"" Jul 11 00:29:19.927959 systemd[1]: Started cri-containerd-8a01f84f8a92cee17bf749aed20e482b3b3728822fc08eb5314baef1fd7dc66d.scope. Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.944000 audit: BPF prog-id=117 op=LOAD Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2030 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:19.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303166383466386139326365653137626637343961656432306534 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2030 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:19.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303166383466386139326365653137626637343961656432306534 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit: BPF prog-id=118 op=LOAD Jul 11 00:29:19.945000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2030 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:19.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303166383466386139326365653137626637343961656432306534 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit: BPF prog-id=119 op=LOAD Jul 11 00:29:19.945000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2030 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:19.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303166383466386139326365653137626637343961656432306534 Jul 11 00:29:19.945000 audit: BPF prog-id=119 op=UNLOAD Jul 11 00:29:19.945000 audit: BPF prog-id=118 op=UNLOAD Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:19.945000 audit: BPF prog-id=120 op=LOAD Jul 11 00:29:19.945000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2030 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:19.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303166383466386139326365653137626637343961656432306534 Jul 11 00:29:19.960688 env[1210]: time="2025-07-11T00:29:19.960630614Z" level=info msg="StartContainer for \"8a01f84f8a92cee17bf749aed20e482b3b3728822fc08eb5314baef1fd7dc66d\" returns successfully" Jul 11 00:29:20.679705 kubelet[1948]: E0711 00:29:20.679673 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:20.694483 kubelet[1948]: I0711 00:29:20.694419 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-dhj2c" podStartSLOduration=1.767550143 podStartE2EDuration="3.694381736s" podCreationTimestamp="2025-07-11 00:29:17 +0000 UTC" firstStartedPulling="2025-07-11 00:29:17.968608713 +0000 UTC m=+5.772908140" lastFinishedPulling="2025-07-11 00:29:19.895440266 +0000 UTC m=+7.699739733" observedRunningTime="2025-07-11 00:29:20.408484371 +0000 UTC m=+8.212783838" watchObservedRunningTime="2025-07-11 00:29:20.694381736 +0000 UTC m=+8.498681203" Jul 11 00:29:21.401459 kubelet[1948]: E0711 00:29:21.401431 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:23.867598 kubelet[1948]: E0711 00:29:23.867566 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:25.419338 sudo[1351]: pam_unix(sudo:session): session closed for user root Jul 11 00:29:25.419000 audit[1351]: USER_END pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:29:25.422616 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 11 00:29:25.422664 kernel: audit: type=1106 audit(1752193765.419:916): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:29:25.422695 kernel: audit: type=1104 audit(1752193765.419:917): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:29:25.419000 audit[1351]: CRED_DISP pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:29:25.424696 sshd[1347]: pam_unix(sshd:session): session closed for user core Jul 11 00:29:25.425000 audit[1347]: USER_END pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:25.427139 systemd[1]: sshd@6-10.0.0.65:22-10.0.0.1:35658.service: Deactivated successfully. Jul 11 00:29:25.427849 systemd[1]: session-7.scope: Deactivated successfully. Jul 11 00:29:25.427997 systemd[1]: session-7.scope: Consumed 6.044s CPU time. Jul 11 00:29:25.425000 audit[1347]: CRED_DISP pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:25.431162 kernel: audit: type=1106 audit(1752193765.425:918): pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:25.431235 kernel: audit: type=1104 audit(1752193765.425:919): pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:25.431302 systemd-logind[1201]: Session 7 logged out. Waiting for processes to exit. Jul 11 00:29:25.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.65:22-10.0.0.1:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:25.433827 kernel: audit: type=1131 audit(1752193765.425:920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.65:22-10.0.0.1:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:25.434200 systemd-logind[1201]: Removed session 7. Jul 11 00:29:26.312000 audit[2337]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:26.314461 kernel: audit: type=1325 audit(1752193766.312:921): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:26.312000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff267ccf0 a2=0 a3=1 items=0 ppid=2100 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:26.312000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:26.318955 kernel: audit: type=1300 audit(1752193766.312:921): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff267ccf0 a2=0 a3=1 items=0 ppid=2100 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:26.319038 kernel: audit: type=1327 audit(1752193766.312:921): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:26.321000 audit[2337]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:26.323447 kernel: audit: type=1325 audit(1752193766.321:922): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:26.323520 kernel: audit: type=1300 audit(1752193766.321:922): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff267ccf0 a2=0 a3=1 items=0 ppid=2100 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:26.321000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff267ccf0 a2=0 a3=1 items=0 ppid=2100 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:26.321000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:26.342000 audit[2339]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:26.342000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdd16f090 a2=0 a3=1 items=0 ppid=2100 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:26.342000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:26.346000 audit[2339]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:26.346000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdd16f090 a2=0 a3=1 items=0 ppid=2100 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:26.346000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:28.964489 update_engine[1204]: I0711 00:29:28.964443 1204 update_attempter.cc:509] Updating boot flags... Jul 11 00:29:29.508000 audit[2355]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:29.508000 audit[2355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc1e4c4d0 a2=0 a3=1 items=0 ppid=2100 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.508000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:29.516000 audit[2355]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:29.516000 audit[2355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc1e4c4d0 a2=0 a3=1 items=0 ppid=2100 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.516000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:29.533000 audit[2357]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:29.533000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd1c03970 a2=0 a3=1 items=0 ppid=2100 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:29.546427 systemd[1]: Created slice kubepods-besteffort-pod109f0ed6_31c1_47a5_a3a9_f1e7ea6ebaf3.slice. Jul 11 00:29:29.560000 audit[2357]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:29.560000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd1c03970 a2=0 a3=1 items=0 ppid=2100 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.560000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:29.568055 kubelet[1948]: I0711 00:29:29.568012 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3-typha-certs\") pod \"calico-typha-5fdd468786-jspfg\" (UID: \"109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3\") " pod="calico-system/calico-typha-5fdd468786-jspfg" Jul 11 00:29:29.568461 kubelet[1948]: I0711 00:29:29.568436 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3-tigera-ca-bundle\") pod \"calico-typha-5fdd468786-jspfg\" (UID: \"109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3\") " pod="calico-system/calico-typha-5fdd468786-jspfg" Jul 11 00:29:29.568577 kubelet[1948]: I0711 00:29:29.568561 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vmlbw\" (UniqueName: \"kubernetes.io/projected/109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3-kube-api-access-vmlbw\") pod \"calico-typha-5fdd468786-jspfg\" (UID: \"109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3\") " pod="calico-system/calico-typha-5fdd468786-jspfg" Jul 11 00:29:29.827940 kubelet[1948]: W0711 00:29:29.827567 1948 reflector.go:561] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 11 00:29:29.827940 kubelet[1948]: E0711 00:29:29.827663 1948 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"node-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"node-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 11 00:29:29.828829 systemd[1]: Created slice kubepods-besteffort-pod1fdb11dd_cff3_463e_bbc1_6bf8fd9e8310.slice. Jul 11 00:29:29.849197 kubelet[1948]: E0711 00:29:29.849153 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:29.849728 env[1210]: time="2025-07-11T00:29:29.849681894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5fdd468786-jspfg,Uid:109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:29.863865 env[1210]: time="2025-07-11T00:29:29.863794205Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:29.863983 env[1210]: time="2025-07-11T00:29:29.863876764Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:29.863983 env[1210]: time="2025-07-11T00:29:29.863908004Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:29.864133 env[1210]: time="2025-07-11T00:29:29.864103362Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c9c11ff33246466471205abbe8596fc0c915f51f538da598cf45c27481cf02b5 pid=2368 runtime=io.containerd.runc.v2 Jul 11 00:29:29.871621 kubelet[1948]: I0711 00:29:29.871583 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-cni-net-dir\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871738 kubelet[1948]: I0711 00:29:29.871644 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-policysync\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871738 kubelet[1948]: I0711 00:29:29.871666 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-xtables-lock\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871738 kubelet[1948]: I0711 00:29:29.871682 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-lib-modules\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871738 kubelet[1948]: I0711 00:29:29.871697 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-flexvol-driver-host\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871738 kubelet[1948]: I0711 00:29:29.871722 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-cni-bin-dir\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871865 kubelet[1948]: I0711 00:29:29.871738 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-cni-log-dir\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871865 kubelet[1948]: I0711 00:29:29.871754 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-var-lib-calico\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871865 kubelet[1948]: I0711 00:29:29.871770 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-node-certs\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871865 kubelet[1948]: I0711 00:29:29.871786 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-tigera-ca-bundle\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871865 kubelet[1948]: I0711 00:29:29.871801 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-var-run-calico\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.871969 kubelet[1948]: I0711 00:29:29.871816 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8v864\" (UniqueName: \"kubernetes.io/projected/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-kube-api-access-8v864\") pod \"calico-node-x4mbg\" (UID: \"1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310\") " pod="calico-system/calico-node-x4mbg" Jul 11 00:29:29.878666 systemd[1]: Started cri-containerd-c9c11ff33246466471205abbe8596fc0c915f51f538da598cf45c27481cf02b5.scope. Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.914000 audit: BPF prog-id=121 op=LOAD Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2368 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339633131666633333234363436363437313230356162626538353936 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2368 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339633131666633333234363436363437313230356162626538353936 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit: BPF prog-id=122 op=LOAD Jul 11 00:29:29.915000 audit[2380]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2368 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339633131666633333234363436363437313230356162626538353936 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit: BPF prog-id=123 op=LOAD Jul 11 00:29:29.915000 audit[2380]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2368 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339633131666633333234363436363437313230356162626538353936 Jul 11 00:29:29.915000 audit: BPF prog-id=123 op=UNLOAD Jul 11 00:29:29.915000 audit: BPF prog-id=122 op=UNLOAD Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:29.915000 audit: BPF prog-id=124 op=LOAD Jul 11 00:29:29.915000 audit[2380]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2368 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339633131666633333234363436363437313230356162626538353936 Jul 11 00:29:29.937813 env[1210]: time="2025-07-11T00:29:29.937773411Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5fdd468786-jspfg,Uid:109f0ed6-31c1-47a5-a3a9-f1e7ea6ebaf3,Namespace:calico-system,Attempt:0,} returns sandbox id \"c9c11ff33246466471205abbe8596fc0c915f51f538da598cf45c27481cf02b5\"" Jul 11 00:29:29.938420 kubelet[1948]: E0711 00:29:29.938382 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:29.939498 env[1210]: time="2025-07-11T00:29:29.939461636Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 11 00:29:29.973183 kubelet[1948]: E0711 00:29:29.973053 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.973183 kubelet[1948]: W0711 00:29:29.973076 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.973183 kubelet[1948]: E0711 00:29:29.973099 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.973546 kubelet[1948]: E0711 00:29:29.973425 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.973546 kubelet[1948]: W0711 00:29:29.973438 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.973546 kubelet[1948]: E0711 00:29:29.973452 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.973862 kubelet[1948]: E0711 00:29:29.973722 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.973862 kubelet[1948]: W0711 00:29:29.973733 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.973862 kubelet[1948]: E0711 00:29:29.973746 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.974919 kubelet[1948]: E0711 00:29:29.974037 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.974919 kubelet[1948]: W0711 00:29:29.974048 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.974919 kubelet[1948]: E0711 00:29:29.974136 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.975108 kubelet[1948]: E0711 00:29:29.975095 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.975171 kubelet[1948]: W0711 00:29:29.975160 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.975327 kubelet[1948]: E0711 00:29:29.975311 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.975493 kubelet[1948]: E0711 00:29:29.975481 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.975561 kubelet[1948]: W0711 00:29:29.975549 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.975711 kubelet[1948]: E0711 00:29:29.975696 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.975846 kubelet[1948]: E0711 00:29:29.975836 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.975912 kubelet[1948]: W0711 00:29:29.975901 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.975974 kubelet[1948]: E0711 00:29:29.975963 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.976193 kubelet[1948]: E0711 00:29:29.976180 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.976274 kubelet[1948]: W0711 00:29:29.976262 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.976331 kubelet[1948]: E0711 00:29:29.976320 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.976596 kubelet[1948]: E0711 00:29:29.976582 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.976686 kubelet[1948]: W0711 00:29:29.976673 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.976753 kubelet[1948]: E0711 00:29:29.976741 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.976986 kubelet[1948]: E0711 00:29:29.976969 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.976986 kubelet[1948]: W0711 00:29:29.976986 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.977074 kubelet[1948]: E0711 00:29:29.977007 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.977171 kubelet[1948]: E0711 00:29:29.977160 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.977171 kubelet[1948]: W0711 00:29:29.977171 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.977232 kubelet[1948]: E0711 00:29:29.977183 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.977446 kubelet[1948]: E0711 00:29:29.977433 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.977446 kubelet[1948]: W0711 00:29:29.977446 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.977530 kubelet[1948]: E0711 00:29:29.977463 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.977660 kubelet[1948]: E0711 00:29:29.977648 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.977694 kubelet[1948]: W0711 00:29:29.977661 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.977694 kubelet[1948]: E0711 00:29:29.977670 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:29.982352 kubelet[1948]: E0711 00:29:29.982324 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:29.982352 kubelet[1948]: W0711 00:29:29.982341 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:29.982509 kubelet[1948]: E0711 00:29:29.982361 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.073799 kubelet[1948]: E0711 00:29:30.073768 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.073972 kubelet[1948]: W0711 00:29:30.073955 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.074050 kubelet[1948]: E0711 00:29:30.074036 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.077390 kubelet[1948]: E0711 00:29:30.077323 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vg4d5" podUID="a32caaa4-7464-4227-89a9-b3ea02143a93" Jul 11 00:29:30.168936 kubelet[1948]: E0711 00:29:30.168904 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.168936 kubelet[1948]: W0711 00:29:30.168927 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.169103 kubelet[1948]: E0711 00:29:30.168949 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.169199 kubelet[1948]: E0711 00:29:30.169185 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.169199 kubelet[1948]: W0711 00:29:30.169198 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.169264 kubelet[1948]: E0711 00:29:30.169209 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.169453 kubelet[1948]: E0711 00:29:30.169438 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.169453 kubelet[1948]: W0711 00:29:30.169452 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.169526 kubelet[1948]: E0711 00:29:30.169464 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.169672 kubelet[1948]: E0711 00:29:30.169657 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.169672 kubelet[1948]: W0711 00:29:30.169671 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.169734 kubelet[1948]: E0711 00:29:30.169685 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.169905 kubelet[1948]: E0711 00:29:30.169891 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.169905 kubelet[1948]: W0711 00:29:30.169904 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.169974 kubelet[1948]: E0711 00:29:30.169915 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.170118 kubelet[1948]: E0711 00:29:30.170085 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.170118 kubelet[1948]: W0711 00:29:30.170098 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.170118 kubelet[1948]: E0711 00:29:30.170107 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.170319 kubelet[1948]: E0711 00:29:30.170306 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.170352 kubelet[1948]: W0711 00:29:30.170319 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.170352 kubelet[1948]: E0711 00:29:30.170330 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.170537 kubelet[1948]: E0711 00:29:30.170522 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.170537 kubelet[1948]: W0711 00:29:30.170533 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.170607 kubelet[1948]: E0711 00:29:30.170541 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.170712 kubelet[1948]: E0711 00:29:30.170699 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.170712 kubelet[1948]: W0711 00:29:30.170710 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.170766 kubelet[1948]: E0711 00:29:30.170718 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.170893 kubelet[1948]: E0711 00:29:30.170872 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.170893 kubelet[1948]: W0711 00:29:30.170885 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.170893 kubelet[1948]: E0711 00:29:30.170893 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.171051 kubelet[1948]: E0711 00:29:30.171032 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.171051 kubelet[1948]: W0711 00:29:30.171043 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.171113 kubelet[1948]: E0711 00:29:30.171053 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.171222 kubelet[1948]: E0711 00:29:30.171203 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.171222 kubelet[1948]: W0711 00:29:30.171213 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.171222 kubelet[1948]: E0711 00:29:30.171221 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.171418 kubelet[1948]: E0711 00:29:30.171371 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.171418 kubelet[1948]: W0711 00:29:30.171388 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.171418 kubelet[1948]: E0711 00:29:30.171418 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.171610 kubelet[1948]: E0711 00:29:30.171588 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.171610 kubelet[1948]: W0711 00:29:30.171600 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.171610 kubelet[1948]: E0711 00:29:30.171609 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.171770 kubelet[1948]: E0711 00:29:30.171752 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.171770 kubelet[1948]: W0711 00:29:30.171764 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.171770 kubelet[1948]: E0711 00:29:30.171772 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.171941 kubelet[1948]: E0711 00:29:30.171922 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.171941 kubelet[1948]: W0711 00:29:30.171939 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.171999 kubelet[1948]: E0711 00:29:30.171948 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.172132 kubelet[1948]: E0711 00:29:30.172115 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.172132 kubelet[1948]: W0711 00:29:30.172127 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.172215 kubelet[1948]: E0711 00:29:30.172136 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.172348 kubelet[1948]: E0711 00:29:30.172328 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.172348 kubelet[1948]: W0711 00:29:30.172342 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.172449 kubelet[1948]: E0711 00:29:30.172351 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.172577 kubelet[1948]: E0711 00:29:30.172561 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.172577 kubelet[1948]: W0711 00:29:30.172573 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.172651 kubelet[1948]: E0711 00:29:30.172583 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.172745 kubelet[1948]: E0711 00:29:30.172730 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.172745 kubelet[1948]: W0711 00:29:30.172741 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.172803 kubelet[1948]: E0711 00:29:30.172749 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.175066 kubelet[1948]: E0711 00:29:30.175041 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.175066 kubelet[1948]: W0711 00:29:30.175059 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.175157 kubelet[1948]: E0711 00:29:30.175072 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.175157 kubelet[1948]: I0711 00:29:30.175098 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a32caaa4-7464-4227-89a9-b3ea02143a93-socket-dir\") pod \"csi-node-driver-vg4d5\" (UID: \"a32caaa4-7464-4227-89a9-b3ea02143a93\") " pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:30.175295 kubelet[1948]: E0711 00:29:30.175279 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.175342 kubelet[1948]: W0711 00:29:30.175295 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.175342 kubelet[1948]: E0711 00:29:30.175310 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.175675 kubelet[1948]: E0711 00:29:30.175482 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.175675 kubelet[1948]: W0711 00:29:30.175498 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.175675 kubelet[1948]: E0711 00:29:30.175513 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.175675 kubelet[1948]: I0711 00:29:30.175530 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-94j6x\" (UniqueName: \"kubernetes.io/projected/a32caaa4-7464-4227-89a9-b3ea02143a93-kube-api-access-94j6x\") pod \"csi-node-driver-vg4d5\" (UID: \"a32caaa4-7464-4227-89a9-b3ea02143a93\") " pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:30.175809 kubelet[1948]: E0711 00:29:30.175712 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.175809 kubelet[1948]: W0711 00:29:30.175723 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.175809 kubelet[1948]: E0711 00:29:30.175740 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.175809 kubelet[1948]: I0711 00:29:30.175755 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a32caaa4-7464-4227-89a9-b3ea02143a93-kubelet-dir\") pod \"csi-node-driver-vg4d5\" (UID: \"a32caaa4-7464-4227-89a9-b3ea02143a93\") " pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:30.176499 kubelet[1948]: E0711 00:29:30.176479 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.176499 kubelet[1948]: W0711 00:29:30.176497 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.176605 kubelet[1948]: E0711 00:29:30.176516 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.176605 kubelet[1948]: I0711 00:29:30.176535 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a32caaa4-7464-4227-89a9-b3ea02143a93-varrun\") pod \"csi-node-driver-vg4d5\" (UID: \"a32caaa4-7464-4227-89a9-b3ea02143a93\") " pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:30.176765 kubelet[1948]: E0711 00:29:30.176750 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.176765 kubelet[1948]: W0711 00:29:30.176764 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.176829 kubelet[1948]: E0711 00:29:30.176791 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.176829 kubelet[1948]: I0711 00:29:30.176821 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a32caaa4-7464-4227-89a9-b3ea02143a93-registration-dir\") pod \"csi-node-driver-vg4d5\" (UID: \"a32caaa4-7464-4227-89a9-b3ea02143a93\") " pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:30.176961 kubelet[1948]: E0711 00:29:30.176942 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.176961 kubelet[1948]: W0711 00:29:30.176957 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.177024 kubelet[1948]: E0711 00:29:30.176977 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.177122 kubelet[1948]: E0711 00:29:30.177111 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.177122 kubelet[1948]: W0711 00:29:30.177122 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.177183 kubelet[1948]: E0711 00:29:30.177140 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.177307 kubelet[1948]: E0711 00:29:30.177294 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.177307 kubelet[1948]: W0711 00:29:30.177305 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.177387 kubelet[1948]: E0711 00:29:30.177325 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.177533 kubelet[1948]: E0711 00:29:30.177522 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.177533 kubelet[1948]: W0711 00:29:30.177533 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.177590 kubelet[1948]: E0711 00:29:30.177548 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.177698 kubelet[1948]: E0711 00:29:30.177689 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.177698 kubelet[1948]: W0711 00:29:30.177698 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.177761 kubelet[1948]: E0711 00:29:30.177711 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.177866 kubelet[1948]: E0711 00:29:30.177857 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.177896 kubelet[1948]: W0711 00:29:30.177866 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.177896 kubelet[1948]: E0711 00:29:30.177874 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.178024 kubelet[1948]: E0711 00:29:30.178015 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.178024 kubelet[1948]: W0711 00:29:30.178024 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.178088 kubelet[1948]: E0711 00:29:30.178034 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.178179 kubelet[1948]: E0711 00:29:30.178170 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.178179 kubelet[1948]: W0711 00:29:30.178178 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.178241 kubelet[1948]: E0711 00:29:30.178185 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.178327 kubelet[1948]: E0711 00:29:30.178318 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.178327 kubelet[1948]: W0711 00:29:30.178327 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.178407 kubelet[1948]: E0711 00:29:30.178335 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.178501 kubelet[1948]: E0711 00:29:30.178492 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.178501 kubelet[1948]: W0711 00:29:30.178501 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.178557 kubelet[1948]: E0711 00:29:30.178510 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.277731 kubelet[1948]: E0711 00:29:30.277698 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.277731 kubelet[1948]: W0711 00:29:30.277719 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.277731 kubelet[1948]: E0711 00:29:30.277739 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.278547 kubelet[1948]: E0711 00:29:30.278523 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.278547 kubelet[1948]: W0711 00:29:30.278541 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.278647 kubelet[1948]: E0711 00:29:30.278555 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.278969 kubelet[1948]: E0711 00:29:30.278944 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.279039 kubelet[1948]: W0711 00:29:30.278961 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.279039 kubelet[1948]: E0711 00:29:30.278998 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.279372 kubelet[1948]: E0711 00:29:30.279341 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.279372 kubelet[1948]: W0711 00:29:30.279356 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.279481 kubelet[1948]: E0711 00:29:30.279382 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.280165 kubelet[1948]: E0711 00:29:30.280014 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.280165 kubelet[1948]: W0711 00:29:30.280029 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.280165 kubelet[1948]: E0711 00:29:30.280046 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.280281 kubelet[1948]: E0711 00:29:30.280242 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.280281 kubelet[1948]: W0711 00:29:30.280251 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.280351 kubelet[1948]: E0711 00:29:30.280330 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.280767 kubelet[1948]: E0711 00:29:30.280433 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.280767 kubelet[1948]: W0711 00:29:30.280441 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.280767 kubelet[1948]: E0711 00:29:30.280469 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.280767 kubelet[1948]: E0711 00:29:30.280599 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.280767 kubelet[1948]: W0711 00:29:30.280609 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.280767 kubelet[1948]: E0711 00:29:30.280728 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.280906 kubelet[1948]: E0711 00:29:30.280831 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.280906 kubelet[1948]: W0711 00:29:30.280839 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.280958 kubelet[1948]: E0711 00:29:30.280902 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281007 kubelet[1948]: E0711 00:29:30.280984 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281007 kubelet[1948]: W0711 00:29:30.280997 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.281073 kubelet[1948]: E0711 00:29:30.281010 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281148 kubelet[1948]: E0711 00:29:30.281135 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281148 kubelet[1948]: W0711 00:29:30.281144 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.281214 kubelet[1948]: E0711 00:29:30.281157 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281286 kubelet[1948]: E0711 00:29:30.281274 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281286 kubelet[1948]: W0711 00:29:30.281283 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.281347 kubelet[1948]: E0711 00:29:30.281296 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281514 kubelet[1948]: E0711 00:29:30.281495 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281514 kubelet[1948]: W0711 00:29:30.281506 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.281621 kubelet[1948]: E0711 00:29:30.281589 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281663 kubelet[1948]: E0711 00:29:30.281633 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281663 kubelet[1948]: W0711 00:29:30.281641 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.281707 kubelet[1948]: E0711 00:29:30.281673 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281784 kubelet[1948]: E0711 00:29:30.281771 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281784 kubelet[1948]: W0711 00:29:30.281781 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.281856 kubelet[1948]: E0711 00:29:30.281837 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.281945 kubelet[1948]: E0711 00:29:30.281928 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.281945 kubelet[1948]: W0711 00:29:30.281937 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.282028 kubelet[1948]: E0711 00:29:30.282004 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.282076 kubelet[1948]: E0711 00:29:30.282063 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.282076 kubelet[1948]: W0711 00:29:30.282073 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.282174 kubelet[1948]: E0711 00:29:30.282156 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.282314 kubelet[1948]: E0711 00:29:30.282292 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.282314 kubelet[1948]: W0711 00:29:30.282305 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.282314 kubelet[1948]: E0711 00:29:30.282320 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.282558 kubelet[1948]: E0711 00:29:30.282536 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.282558 kubelet[1948]: W0711 00:29:30.282553 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.282635 kubelet[1948]: E0711 00:29:30.282596 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.282934 kubelet[1948]: E0711 00:29:30.282919 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.283040 kubelet[1948]: W0711 00:29:30.283025 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.283109 kubelet[1948]: E0711 00:29:30.283096 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.283321 kubelet[1948]: E0711 00:29:30.283299 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.283321 kubelet[1948]: W0711 00:29:30.283315 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.283452 kubelet[1948]: E0711 00:29:30.283332 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.283625 kubelet[1948]: E0711 00:29:30.283601 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.283625 kubelet[1948]: W0711 00:29:30.283617 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.283705 kubelet[1948]: E0711 00:29:30.283693 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.283813 kubelet[1948]: E0711 00:29:30.283795 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.283813 kubelet[1948]: W0711 00:29:30.283803 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.283878 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.283979 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.285463 kubelet[1948]: W0711 00:29:30.283986 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.284061 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.284155 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.285463 kubelet[1948]: W0711 00:29:30.284161 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.284170 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.284665 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.285463 kubelet[1948]: W0711 00:29:30.284676 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.285463 kubelet[1948]: E0711 00:29:30.284686 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.297710 kubelet[1948]: E0711 00:29:30.297676 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.297710 kubelet[1948]: W0711 00:29:30.297699 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.297710 kubelet[1948]: E0711 00:29:30.297718 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.381543 kubelet[1948]: E0711 00:29:30.381504 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.381543 kubelet[1948]: W0711 00:29:30.381527 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.381543 kubelet[1948]: E0711 00:29:30.381546 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.482198 kubelet[1948]: E0711 00:29:30.482107 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.482198 kubelet[1948]: W0711 00:29:30.482129 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.482198 kubelet[1948]: E0711 00:29:30.482149 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.572000 audit[2485]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:30.574503 kernel: kauditd_printk_skb: 76 callbacks suppressed Jul 11 00:29:30.574665 kernel: audit: type=1325 audit(1752193770.572:947): table=filter:97 family=2 entries=20 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:30.572000 audit[2485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd7a4dd90 a2=0 a3=1 items=0 ppid=2100 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:30.578754 kernel: audit: type=1300 audit(1752193770.572:947): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd7a4dd90 a2=0 a3=1 items=0 ppid=2100 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:30.578832 kernel: audit: type=1327 audit(1752193770.572:947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:30.572000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:30.580000 audit[2485]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:30.582557 kubelet[1948]: E0711 00:29:30.582529 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.582557 kubelet[1948]: W0711 00:29:30.582552 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.582834 kubelet[1948]: E0711 00:29:30.582571 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.580000 audit[2485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd7a4dd90 a2=0 a3=1 items=0 ppid=2100 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:30.586119 kernel: audit: type=1325 audit(1752193770.580:948): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:30.586182 kernel: audit: type=1300 audit(1752193770.580:948): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd7a4dd90 a2=0 a3=1 items=0 ppid=2100 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:30.586217 kernel: audit: type=1327 audit(1752193770.580:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:30.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:30.684391 kubelet[1948]: E0711 00:29:30.684278 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.684391 kubelet[1948]: W0711 00:29:30.684306 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.684391 kubelet[1948]: E0711 00:29:30.684325 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.786177 kubelet[1948]: E0711 00:29:30.785554 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.786177 kubelet[1948]: W0711 00:29:30.785576 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.786177 kubelet[1948]: E0711 00:29:30.785596 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.867481 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1829098018.mount: Deactivated successfully. Jul 11 00:29:30.886821 kubelet[1948]: E0711 00:29:30.886779 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.886821 kubelet[1948]: W0711 00:29:30.886804 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.886821 kubelet[1948]: E0711 00:29:30.886823 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:30.978018 kubelet[1948]: E0711 00:29:30.977965 1948 secret.go:189] Couldn't get secret calico-system/node-certs: failed to sync secret cache: timed out waiting for the condition Jul 11 00:29:30.978232 kubelet[1948]: E0711 00:29:30.978058 1948 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-node-certs podName:1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310 nodeName:}" failed. No retries permitted until 2025-07-11 00:29:31.478039048 +0000 UTC m=+19.282338515 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "node-certs" (UniqueName: "kubernetes.io/secret/1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310-node-certs") pod "calico-node-x4mbg" (UID: "1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310") : failed to sync secret cache: timed out waiting for the condition Jul 11 00:29:30.987496 kubelet[1948]: E0711 00:29:30.987455 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:30.987496 kubelet[1948]: W0711 00:29:30.987477 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:30.987637 kubelet[1948]: E0711 00:29:30.987504 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.089000 kubelet[1948]: E0711 00:29:31.088426 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.089000 kubelet[1948]: W0711 00:29:31.088449 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.089000 kubelet[1948]: E0711 00:29:31.088467 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.189890 kubelet[1948]: E0711 00:29:31.189847 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.189890 kubelet[1948]: W0711 00:29:31.189870 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.189890 kubelet[1948]: E0711 00:29:31.189888 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.290456 kubelet[1948]: E0711 00:29:31.290423 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.290456 kubelet[1948]: W0711 00:29:31.290445 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.290456 kubelet[1948]: E0711 00:29:31.290464 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.366504 kubelet[1948]: E0711 00:29:31.366455 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vg4d5" podUID="a32caaa4-7464-4227-89a9-b3ea02143a93" Jul 11 00:29:31.391595 kubelet[1948]: E0711 00:29:31.391551 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.391595 kubelet[1948]: W0711 00:29:31.391574 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.391595 kubelet[1948]: E0711 00:29:31.391593 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.463198 env[1210]: time="2025-07-11T00:29:31.463147915Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:31.464820 env[1210]: time="2025-07-11T00:29:31.464780182Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:31.466144 env[1210]: time="2025-07-11T00:29:31.466116971Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:31.468029 env[1210]: time="2025-07-11T00:29:31.467993076Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:31.468496 env[1210]: time="2025-07-11T00:29:31.468372032Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 11 00:29:31.477899 env[1210]: time="2025-07-11T00:29:31.477862234Z" level=info msg="CreateContainer within sandbox \"c9c11ff33246466471205abbe8596fc0c915f51f538da598cf45c27481cf02b5\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 11 00:29:31.488106 env[1210]: time="2025-07-11T00:29:31.488056230Z" level=info msg="CreateContainer within sandbox \"c9c11ff33246466471205abbe8596fc0c915f51f538da598cf45c27481cf02b5\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"8dff1a306ac051431f36bf64e237a0f92815331705178805a8e2c097170bab49\"" Jul 11 00:29:31.488594 env[1210]: time="2025-07-11T00:29:31.488565466Z" level=info msg="StartContainer for \"8dff1a306ac051431f36bf64e237a0f92815331705178805a8e2c097170bab49\"" Jul 11 00:29:31.493535 kubelet[1948]: E0711 00:29:31.493500 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.493535 kubelet[1948]: W0711 00:29:31.493522 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.493686 kubelet[1948]: E0711 00:29:31.493554 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.493819 kubelet[1948]: E0711 00:29:31.493801 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.493819 kubelet[1948]: W0711 00:29:31.493813 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.493920 kubelet[1948]: E0711 00:29:31.493824 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.493999 kubelet[1948]: E0711 00:29:31.493987 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.494051 kubelet[1948]: W0711 00:29:31.494006 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.494051 kubelet[1948]: E0711 00:29:31.494015 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.494814 kubelet[1948]: E0711 00:29:31.494275 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.494814 kubelet[1948]: W0711 00:29:31.494288 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.494814 kubelet[1948]: E0711 00:29:31.494332 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.494814 kubelet[1948]: E0711 00:29:31.494730 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.494814 kubelet[1948]: W0711 00:29:31.494777 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.494814 kubelet[1948]: E0711 00:29:31.494803 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.499565 kubelet[1948]: E0711 00:29:31.499546 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:31.499565 kubelet[1948]: W0711 00:29:31.499563 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:31.499674 kubelet[1948]: E0711 00:29:31.499575 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:31.508641 systemd[1]: Started cri-containerd-8dff1a306ac051431f36bf64e237a0f92815331705178805a8e2c097170bab49.scope. Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.555545 kernel: audit: type=1400 audit(1752193771.550:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.555934 kernel: audit: type=1400 audit(1752193771.550:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.555957 kernel: audit: type=1400 audit(1752193771.550:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.560014 kernel: audit: type=1400 audit(1752193771.550:952): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.552000 audit: BPF prog-id=125 op=LOAD Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2368 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666631613330366163303531343331663336626636346532333761 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2368 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666631613330366163303531343331663336626636346532333761 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit: BPF prog-id=126 op=LOAD Jul 11 00:29:31.556000 audit[2511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2368 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666631613330366163303531343331663336626636346532333761 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit: BPF prog-id=127 op=LOAD Jul 11 00:29:31.556000 audit[2511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2368 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666631613330366163303531343331663336626636346532333761 Jul 11 00:29:31.556000 audit: BPF prog-id=127 op=UNLOAD Jul 11 00:29:31.556000 audit: BPF prog-id=126 op=UNLOAD Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.556000 audit: BPF prog-id=128 op=LOAD Jul 11 00:29:31.556000 audit[2511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2368 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666631613330366163303531343331663336626636346532333761 Jul 11 00:29:31.591138 env[1210]: time="2025-07-11T00:29:31.588556561Z" level=info msg="StartContainer for \"8dff1a306ac051431f36bf64e237a0f92815331705178805a8e2c097170bab49\" returns successfully" Jul 11 00:29:31.633371 env[1210]: time="2025-07-11T00:29:31.632297520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-x4mbg,Uid:1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:31.653606 env[1210]: time="2025-07-11T00:29:31.653533224Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:31.653606 env[1210]: time="2025-07-11T00:29:31.653574824Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:31.653606 env[1210]: time="2025-07-11T00:29:31.653584944Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:31.653796 env[1210]: time="2025-07-11T00:29:31.653743623Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a pid=2547 runtime=io.containerd.runc.v2 Jul 11 00:29:31.663625 systemd[1]: Started cri-containerd-3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a.scope. Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.714000 audit: BPF prog-id=129 op=LOAD Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2547 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365363962326135383435393231626665613431303530633532646662 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2547 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365363962326135383435393231626665613431303530633532646662 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit: BPF prog-id=130 op=LOAD Jul 11 00:29:31.715000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2547 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365363962326135383435393231626665613431303530633532646662 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit: BPF prog-id=131 op=LOAD Jul 11 00:29:31.715000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2547 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365363962326135383435393231626665613431303530633532646662 Jul 11 00:29:31.715000 audit: BPF prog-id=131 op=UNLOAD Jul 11 00:29:31.715000 audit: BPF prog-id=130 op=UNLOAD Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:31.715000 audit: BPF prog-id=132 op=LOAD Jul 11 00:29:31.715000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2547 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:31.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365363962326135383435393231626665613431303530633532646662 Jul 11 00:29:31.731920 env[1210]: time="2025-07-11T00:29:31.731873338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-x4mbg,Uid:1fdb11dd-cff3-463e-bbc1-6bf8fd9e8310,Namespace:calico-system,Attempt:0,} returns sandbox id \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\"" Jul 11 00:29:31.734358 env[1210]: time="2025-07-11T00:29:31.734301558Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 11 00:29:32.422508 kubelet[1948]: E0711 00:29:32.422470 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:32.454082 kubelet[1948]: I0711 00:29:32.450162 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5fdd468786-jspfg" podStartSLOduration=1.919979039 podStartE2EDuration="3.450143465s" podCreationTimestamp="2025-07-11 00:29:29 +0000 UTC" firstStartedPulling="2025-07-11 00:29:29.939136839 +0000 UTC m=+17.743436306" lastFinishedPulling="2025-07-11 00:29:31.469301265 +0000 UTC m=+19.273600732" observedRunningTime="2025-07-11 00:29:32.438582596 +0000 UTC m=+20.242882063" watchObservedRunningTime="2025-07-11 00:29:32.450143465 +0000 UTC m=+20.254442932" Jul 11 00:29:32.461000 audit[2590]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:32.461000 audit[2590]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff170b180 a2=0 a3=1 items=0 ppid=2100 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:32.461000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:32.465000 audit[2590]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:32.465000 audit[2590]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff170b180 a2=0 a3=1 items=0 ppid=2100 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:32.465000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:32.488445 kubelet[1948]: E0711 00:29:32.488376 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.488445 kubelet[1948]: W0711 00:29:32.488413 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.488445 kubelet[1948]: E0711 00:29:32.488432 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.488642 kubelet[1948]: E0711 00:29:32.488613 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.488642 kubelet[1948]: W0711 00:29:32.488622 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.488642 kubelet[1948]: E0711 00:29:32.488631 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.488815 kubelet[1948]: E0711 00:29:32.488788 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.488815 kubelet[1948]: W0711 00:29:32.488800 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.488815 kubelet[1948]: E0711 00:29:32.488811 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.488958 kubelet[1948]: E0711 00:29:32.488947 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.488958 kubelet[1948]: W0711 00:29:32.488956 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489014 kubelet[1948]: E0711 00:29:32.488965 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489100 kubelet[1948]: E0711 00:29:32.489091 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489100 kubelet[1948]: W0711 00:29:32.489100 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489147 kubelet[1948]: E0711 00:29:32.489107 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489226 kubelet[1948]: E0711 00:29:32.489217 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489255 kubelet[1948]: W0711 00:29:32.489226 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489255 kubelet[1948]: E0711 00:29:32.489233 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489360 kubelet[1948]: E0711 00:29:32.489350 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489385 kubelet[1948]: W0711 00:29:32.489359 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489385 kubelet[1948]: E0711 00:29:32.489367 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489514 kubelet[1948]: E0711 00:29:32.489498 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489514 kubelet[1948]: W0711 00:29:32.489504 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489514 kubelet[1948]: E0711 00:29:32.489511 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489649 kubelet[1948]: E0711 00:29:32.489636 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489649 kubelet[1948]: W0711 00:29:32.489645 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489696 kubelet[1948]: E0711 00:29:32.489653 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489772 kubelet[1948]: E0711 00:29:32.489763 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489798 kubelet[1948]: W0711 00:29:32.489771 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489798 kubelet[1948]: E0711 00:29:32.489779 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.489899 kubelet[1948]: E0711 00:29:32.489890 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.489922 kubelet[1948]: W0711 00:29:32.489899 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.489922 kubelet[1948]: E0711 00:29:32.489906 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.490033 kubelet[1948]: E0711 00:29:32.490024 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.490062 kubelet[1948]: W0711 00:29:32.490032 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.490062 kubelet[1948]: E0711 00:29:32.490039 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.490164 kubelet[1948]: E0711 00:29:32.490156 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.490190 kubelet[1948]: W0711 00:29:32.490164 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.490190 kubelet[1948]: E0711 00:29:32.490172 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.490290 kubelet[1948]: E0711 00:29:32.490282 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.490317 kubelet[1948]: W0711 00:29:32.490290 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.490317 kubelet[1948]: E0711 00:29:32.490298 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.490470 kubelet[1948]: E0711 00:29:32.490460 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.490470 kubelet[1948]: W0711 00:29:32.490469 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.490525 kubelet[1948]: E0711 00:29:32.490478 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.503853 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.504651 kubelet[1948]: W0711 00:29:32.503873 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.503889 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.504131 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.504651 kubelet[1948]: W0711 00:29:32.504141 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.504158 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.504339 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.504651 kubelet[1948]: W0711 00:29:32.504348 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.504363 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.504651 kubelet[1948]: E0711 00:29:32.504569 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505179 kubelet[1948]: W0711 00:29:32.504579 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505179 kubelet[1948]: E0711 00:29:32.504593 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505179 kubelet[1948]: E0711 00:29:32.504731 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505179 kubelet[1948]: W0711 00:29:32.504741 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505179 kubelet[1948]: E0711 00:29:32.504755 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505179 kubelet[1948]: E0711 00:29:32.504874 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505179 kubelet[1948]: W0711 00:29:32.504882 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505179 kubelet[1948]: E0711 00:29:32.504893 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505179 kubelet[1948]: E0711 00:29:32.505044 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505179 kubelet[1948]: W0711 00:29:32.505051 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505509 kubelet[1948]: E0711 00:29:32.505063 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505509 kubelet[1948]: E0711 00:29:32.505275 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505509 kubelet[1948]: W0711 00:29:32.505288 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505509 kubelet[1948]: E0711 00:29:32.505307 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505509 kubelet[1948]: E0711 00:29:32.505482 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505509 kubelet[1948]: W0711 00:29:32.505491 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505672 kubelet[1948]: E0711 00:29:32.505519 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505672 kubelet[1948]: E0711 00:29:32.505668 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505725 kubelet[1948]: W0711 00:29:32.505676 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505751 kubelet[1948]: E0711 00:29:32.505721 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505887 kubelet[1948]: E0711 00:29:32.505817 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.505887 kubelet[1948]: W0711 00:29:32.505826 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.505887 kubelet[1948]: E0711 00:29:32.505841 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.505977 kubelet[1948]: E0711 00:29:32.505971 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.506001 kubelet[1948]: W0711 00:29:32.505980 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.506001 kubelet[1948]: E0711 00:29:32.505992 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.506177 kubelet[1948]: E0711 00:29:32.506161 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.506220 kubelet[1948]: W0711 00:29:32.506192 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.506220 kubelet[1948]: E0711 00:29:32.506207 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.506477 kubelet[1948]: E0711 00:29:32.506461 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.506477 kubelet[1948]: W0711 00:29:32.506475 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.506569 kubelet[1948]: E0711 00:29:32.506491 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.506634 kubelet[1948]: E0711 00:29:32.506622 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.506634 kubelet[1948]: W0711 00:29:32.506632 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.506705 kubelet[1948]: E0711 00:29:32.506644 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.506815 kubelet[1948]: E0711 00:29:32.506804 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.506845 kubelet[1948]: W0711 00:29:32.506816 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.506845 kubelet[1948]: E0711 00:29:32.506829 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.506988 kubelet[1948]: E0711 00:29:32.506975 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.507025 kubelet[1948]: W0711 00:29:32.506989 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.507025 kubelet[1948]: E0711 00:29:32.507006 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.507478 kubelet[1948]: E0711 00:29:32.507433 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:29:32.507478 kubelet[1948]: W0711 00:29:32.507448 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:29:32.507478 kubelet[1948]: E0711 00:29:32.507480 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:29:32.613046 env[1210]: time="2025-07-11T00:29:32.612998424Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:32.614892 env[1210]: time="2025-07-11T00:29:32.614861570Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:32.616337 env[1210]: time="2025-07-11T00:29:32.616299118Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:32.619117 env[1210]: time="2025-07-11T00:29:32.619093256Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:32.619657 env[1210]: time="2025-07-11T00:29:32.619621732Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 11 00:29:32.622175 env[1210]: time="2025-07-11T00:29:32.622138792Z" level=info msg="CreateContainer within sandbox \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 11 00:29:32.632381 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3293340.mount: Deactivated successfully. Jul 11 00:29:32.635165 env[1210]: time="2025-07-11T00:29:32.635120730Z" level=info msg="CreateContainer within sandbox \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e\"" Jul 11 00:29:32.635975 env[1210]: time="2025-07-11T00:29:32.635935004Z" level=info msg="StartContainer for \"ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e\"" Jul 11 00:29:32.655593 systemd[1]: Started cri-containerd-ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e.scope. Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2547 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563363437643435386564393163333835363234663463323666383239 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit: BPF prog-id=133 op=LOAD Jul 11 00:29:32.677000 audit[2631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2547 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563363437643435386564393163333835363234663463323666383239 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit: BPF prog-id=134 op=LOAD Jul 11 00:29:32.677000 audit[2631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2547 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563363437643435386564393163333835363234663463323666383239 Jul 11 00:29:32.677000 audit: BPF prog-id=134 op=UNLOAD Jul 11 00:29:32.677000 audit: BPF prog-id=133 op=UNLOAD Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:32.677000 audit: BPF prog-id=135 op=LOAD Jul 11 00:29:32.677000 audit[2631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2547 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563363437643435386564393163333835363234663463323666383239 Jul 11 00:29:32.695759 env[1210]: time="2025-07-11T00:29:32.695710494Z" level=info msg="StartContainer for \"ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e\" returns successfully" Jul 11 00:29:32.719239 systemd[1]: cri-containerd-ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e.scope: Deactivated successfully. Jul 11 00:29:32.723000 audit: BPF prog-id=135 op=UNLOAD Jul 11 00:29:32.736466 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e-rootfs.mount: Deactivated successfully. Jul 11 00:29:32.781111 env[1210]: time="2025-07-11T00:29:32.781062343Z" level=info msg="shim disconnected" id=ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e Jul 11 00:29:32.781384 env[1210]: time="2025-07-11T00:29:32.781364060Z" level=warning msg="cleaning up after shim disconnected" id=ec647d458ed91c385624f4c26f829d155b16c79d05117221b8eacc057db26e3e namespace=k8s.io Jul 11 00:29:32.781501 env[1210]: time="2025-07-11T00:29:32.781486299Z" level=info msg="cleaning up dead shim" Jul 11 00:29:32.788811 env[1210]: time="2025-07-11T00:29:32.788773522Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:29:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2672 runtime=io.containerd.runc.v2\n" Jul 11 00:29:33.367730 kubelet[1948]: E0711 00:29:33.367677 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vg4d5" podUID="a32caaa4-7464-4227-89a9-b3ea02143a93" Jul 11 00:29:33.428716 kubelet[1948]: E0711 00:29:33.428687 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:33.429924 env[1210]: time="2025-07-11T00:29:33.429890316Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 11 00:29:34.464433 kubelet[1948]: E0711 00:29:34.464380 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:35.366470 kubelet[1948]: E0711 00:29:35.366413 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vg4d5" podUID="a32caaa4-7464-4227-89a9-b3ea02143a93" Jul 11 00:29:35.717098 env[1210]: time="2025-07-11T00:29:35.716995696Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:35.718611 env[1210]: time="2025-07-11T00:29:35.718578885Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:35.720986 env[1210]: time="2025-07-11T00:29:35.720962869Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:35.722238 env[1210]: time="2025-07-11T00:29:35.722192221Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:35.722638 env[1210]: time="2025-07-11T00:29:35.722609258Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 11 00:29:35.725586 env[1210]: time="2025-07-11T00:29:35.725543678Z" level=info msg="CreateContainer within sandbox \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 11 00:29:35.739011 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2549838117.mount: Deactivated successfully. Jul 11 00:29:35.748051 env[1210]: time="2025-07-11T00:29:35.747975324Z" level=info msg="CreateContainer within sandbox \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633\"" Jul 11 00:29:35.748839 env[1210]: time="2025-07-11T00:29:35.748810799Z" level=info msg="StartContainer for \"d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633\"" Jul 11 00:29:35.769198 systemd[1]: Started cri-containerd-d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633.scope. Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.909919 kernel: kauditd_printk_skb: 160 callbacks suppressed Jul 11 00:29:35.909998 kernel: audit: type=1400 audit(1752193775.906:994): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.910037 kernel: audit: type=1300 audit(1752193775.906:994): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2547 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:35.906000 audit[2698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2547 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:35.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616239663766393263323032323262616632346133386238343939 Jul 11 00:29:35.915728 kernel: audit: type=1327 audit(1752193775.906:994): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616239663766393263323032323262616632346133386238343939 Jul 11 00:29:35.915782 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.917462 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.921296 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.921368 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.925260 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.925337 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.929156 kernel: audit: type=1400 audit(1752193775.906:995): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit: BPF prog-id=136 op=LOAD Jul 11 00:29:35.906000 audit[2698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2547 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:35.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616239663766393263323032323262616632346133386238343939 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.906000 audit: BPF prog-id=137 op=LOAD Jul 11 00:29:35.906000 audit[2698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2547 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:35.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616239663766393263323032323262616632346133386238343939 Jul 11 00:29:35.908000 audit: BPF prog-id=137 op=UNLOAD Jul 11 00:29:35.908000 audit: BPF prog-id=136 op=UNLOAD Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:35.908000 audit: BPF prog-id=138 op=LOAD Jul 11 00:29:35.908000 audit[2698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2547 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:35.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616239663766393263323032323262616632346133386238343939 Jul 11 00:29:35.932938 env[1210]: time="2025-07-11T00:29:35.932898660Z" level=info msg="StartContainer for \"d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633\" returns successfully" Jul 11 00:29:36.527461 systemd[1]: cri-containerd-d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633.scope: Deactivated successfully. Jul 11 00:29:36.532000 audit: BPF prog-id=138 op=UNLOAD Jul 11 00:29:36.575981 kubelet[1948]: I0711 00:29:36.575953 1948 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 11 00:29:36.631839 systemd[1]: Created slice kubepods-burstable-pod92c2ade4_59cc_4e62_b054_56068cb51ff3.slice. Jul 11 00:29:36.639479 env[1210]: time="2025-07-11T00:29:36.639413219Z" level=info msg="shim disconnected" id=d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633 Jul 11 00:29:36.639479 env[1210]: time="2025-07-11T00:29:36.639465178Z" level=warning msg="cleaning up after shim disconnected" id=d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633 namespace=k8s.io Jul 11 00:29:36.639479 env[1210]: time="2025-07-11T00:29:36.639475378Z" level=info msg="cleaning up dead shim" Jul 11 00:29:36.646199 systemd[1]: Created slice kubepods-burstable-pod7164bfc3_1b61_4f56_8b81_5f68ee41505e.slice. Jul 11 00:29:36.657885 systemd[1]: Created slice kubepods-besteffort-podc63522c7_9a2f_4d98_8548_32650e05e81b.slice. Jul 11 00:29:36.658833 env[1210]: time="2025-07-11T00:29:36.658797732Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:29:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2739 runtime=io.containerd.runc.v2\n" Jul 11 00:29:36.662716 systemd[1]: Created slice kubepods-besteffort-pod5e7bd041_bfeb_44c3_8199_39d9c2fb02b5.slice. Jul 11 00:29:36.671295 systemd[1]: Created slice kubepods-besteffort-podacd0bd31_6a75_4031_b009_73135f28132c.slice. Jul 11 00:29:36.675923 systemd[1]: Created slice kubepods-besteffort-pod5cb126e3_1fdb_4fea_ba79_3db92e5a1116.slice. Jul 11 00:29:36.683097 systemd[1]: Created slice kubepods-besteffort-podd9ad1df2_e486_4fd8_a8b0_d70e60752567.slice. Jul 11 00:29:36.736952 systemd[1]: run-containerd-runc-k8s.io-d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633-runc.5Hu87o.mount: Deactivated successfully. Jul 11 00:29:36.737043 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d7ab9f7f92c20222baf24a38b8499548536b99a4d9c56611cfe2a81b2f2a3633-rootfs.mount: Deactivated successfully. Jul 11 00:29:36.739800 kubelet[1948]: I0711 00:29:36.739763 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c63522c7-9a2f-4d98-8548-32650e05e81b-tigera-ca-bundle\") pod \"calico-kube-controllers-85cc845489-mxllf\" (UID: \"c63522c7-9a2f-4d98-8548-32650e05e81b\") " pod="calico-system/calico-kube-controllers-85cc845489-mxllf" Jul 11 00:29:36.739949 kubelet[1948]: I0711 00:29:36.739934 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dpmmh\" (UniqueName: \"kubernetes.io/projected/92c2ade4-59cc-4e62-b054-56068cb51ff3-kube-api-access-dpmmh\") pod \"coredns-7c65d6cfc9-cqxt6\" (UID: \"92c2ade4-59cc-4e62-b054-56068cb51ff3\") " pod="kube-system/coredns-7c65d6cfc9-cqxt6" Jul 11 00:29:36.740060 kubelet[1948]: I0711 00:29:36.740040 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-backend-key-pair\") pod \"whisker-66b6659fdf-6fp9h\" (UID: \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\") " pod="calico-system/whisker-66b6659fdf-6fp9h" Jul 11 00:29:36.740150 kubelet[1948]: I0711 00:29:36.740136 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/acd0bd31-6a75-4031-b009-73135f28132c-calico-apiserver-certs\") pod \"calico-apiserver-55c6f7fb7-9rhjl\" (UID: \"acd0bd31-6a75-4031-b009-73135f28132c\") " pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" Jul 11 00:29:36.740244 kubelet[1948]: I0711 00:29:36.740228 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7164bfc3-1b61-4f56-8b81-5f68ee41505e-config-volume\") pod \"coredns-7c65d6cfc9-zhcp8\" (UID: \"7164bfc3-1b61-4f56-8b81-5f68ee41505e\") " pod="kube-system/coredns-7c65d6cfc9-zhcp8" Jul 11 00:29:36.740344 kubelet[1948]: I0711 00:29:36.740329 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zprrs\" (UniqueName: \"kubernetes.io/projected/7164bfc3-1b61-4f56-8b81-5f68ee41505e-kube-api-access-zprrs\") pod \"coredns-7c65d6cfc9-zhcp8\" (UID: \"7164bfc3-1b61-4f56-8b81-5f68ee41505e\") " pod="kube-system/coredns-7c65d6cfc9-zhcp8" Jul 11 00:29:36.740445 kubelet[1948]: I0711 00:29:36.740427 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n8pkn\" (UniqueName: \"kubernetes.io/projected/c63522c7-9a2f-4d98-8548-32650e05e81b-kube-api-access-n8pkn\") pod \"calico-kube-controllers-85cc845489-mxllf\" (UID: \"c63522c7-9a2f-4d98-8548-32650e05e81b\") " pod="calico-system/calico-kube-controllers-85cc845489-mxllf" Jul 11 00:29:36.740553 kubelet[1948]: I0711 00:29:36.740537 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/92c2ade4-59cc-4e62-b054-56068cb51ff3-config-volume\") pod \"coredns-7c65d6cfc9-cqxt6\" (UID: \"92c2ade4-59cc-4e62-b054-56068cb51ff3\") " pod="kube-system/coredns-7c65d6cfc9-cqxt6" Jul 11 00:29:36.740645 kubelet[1948]: I0711 00:29:36.740630 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vsp7m\" (UniqueName: \"kubernetes.io/projected/acd0bd31-6a75-4031-b009-73135f28132c-kube-api-access-vsp7m\") pod \"calico-apiserver-55c6f7fb7-9rhjl\" (UID: \"acd0bd31-6a75-4031-b009-73135f28132c\") " pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" Jul 11 00:29:36.740732 kubelet[1948]: I0711 00:29:36.740718 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-ca-bundle\") pod \"whisker-66b6659fdf-6fp9h\" (UID: \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\") " pod="calico-system/whisker-66b6659fdf-6fp9h" Jul 11 00:29:36.740817 kubelet[1948]: I0711 00:29:36.740805 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5e7bd041-bfeb-44c3-8199-39d9c2fb02b5-calico-apiserver-certs\") pod \"calico-apiserver-55c6f7fb7-bcrzs\" (UID: \"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5\") " pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" Jul 11 00:29:36.740903 kubelet[1948]: I0711 00:29:36.740889 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/5cb126e3-1fdb-4fea-ba79-3db92e5a1116-config\") pod \"goldmane-58fd7646b9-ltzwj\" (UID: \"5cb126e3-1fdb-4fea-ba79-3db92e5a1116\") " pod="calico-system/goldmane-58fd7646b9-ltzwj" Jul 11 00:29:36.740992 kubelet[1948]: I0711 00:29:36.740979 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8blwp\" (UniqueName: \"kubernetes.io/projected/5cb126e3-1fdb-4fea-ba79-3db92e5a1116-kube-api-access-8blwp\") pod \"goldmane-58fd7646b9-ltzwj\" (UID: \"5cb126e3-1fdb-4fea-ba79-3db92e5a1116\") " pod="calico-system/goldmane-58fd7646b9-ltzwj" Jul 11 00:29:36.741099 kubelet[1948]: I0711 00:29:36.741083 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5cb126e3-1fdb-4fea-ba79-3db92e5a1116-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-ltzwj\" (UID: \"5cb126e3-1fdb-4fea-ba79-3db92e5a1116\") " pod="calico-system/goldmane-58fd7646b9-ltzwj" Jul 11 00:29:36.741182 kubelet[1948]: I0711 00:29:36.741169 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/5cb126e3-1fdb-4fea-ba79-3db92e5a1116-goldmane-key-pair\") pod \"goldmane-58fd7646b9-ltzwj\" (UID: \"5cb126e3-1fdb-4fea-ba79-3db92e5a1116\") " pod="calico-system/goldmane-58fd7646b9-ltzwj" Jul 11 00:29:36.741275 kubelet[1948]: I0711 00:29:36.741253 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4crx2\" (UniqueName: \"kubernetes.io/projected/d9ad1df2-e486-4fd8-a8b0-d70e60752567-kube-api-access-4crx2\") pod \"whisker-66b6659fdf-6fp9h\" (UID: \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\") " pod="calico-system/whisker-66b6659fdf-6fp9h" Jul 11 00:29:36.741359 kubelet[1948]: I0711 00:29:36.741346 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-whlzc\" (UniqueName: \"kubernetes.io/projected/5e7bd041-bfeb-44c3-8199-39d9c2fb02b5-kube-api-access-whlzc\") pod \"calico-apiserver-55c6f7fb7-bcrzs\" (UID: \"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5\") " pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" Jul 11 00:29:36.935254 kubelet[1948]: E0711 00:29:36.935209 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:36.936631 env[1210]: time="2025-07-11T00:29:36.936582115Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cqxt6,Uid:92c2ade4-59cc-4e62-b054-56068cb51ff3,Namespace:kube-system,Attempt:0,}" Jul 11 00:29:36.956447 kubelet[1948]: E0711 00:29:36.956416 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:36.957343 env[1210]: time="2025-07-11T00:29:36.957306940Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zhcp8,Uid:7164bfc3-1b61-4f56-8b81-5f68ee41505e,Namespace:kube-system,Attempt:0,}" Jul 11 00:29:36.960824 env[1210]: time="2025-07-11T00:29:36.960780037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85cc845489-mxllf,Uid:c63522c7-9a2f-4d98-8548-32650e05e81b,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:36.970322 env[1210]: time="2025-07-11T00:29:36.970271535Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-bcrzs,Uid:5e7bd041-bfeb-44c3-8199-39d9c2fb02b5,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:29:36.974207 env[1210]: time="2025-07-11T00:29:36.974159830Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-9rhjl,Uid:acd0bd31-6a75-4031-b009-73135f28132c,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:29:36.982936 env[1210]: time="2025-07-11T00:29:36.982871253Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-ltzwj,Uid:5cb126e3-1fdb-4fea-ba79-3db92e5a1116,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:36.988103 env[1210]: time="2025-07-11T00:29:36.988061099Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-66b6659fdf-6fp9h,Uid:d9ad1df2-e486-4fd8-a8b0-d70e60752567,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:37.147939 env[1210]: time="2025-07-11T00:29:37.147846735Z" level=error msg="Failed to destroy network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.148271 env[1210]: time="2025-07-11T00:29:37.148223933Z" level=error msg="encountered an error cleaning up failed sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.148334 env[1210]: time="2025-07-11T00:29:37.148289132Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cqxt6,Uid:92c2ade4-59cc-4e62-b054-56068cb51ff3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.148609 kubelet[1948]: E0711 00:29:37.148560 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.148676 kubelet[1948]: E0711 00:29:37.148637 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-cqxt6" Jul 11 00:29:37.148676 kubelet[1948]: E0711 00:29:37.148659 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-cqxt6" Jul 11 00:29:37.148748 kubelet[1948]: E0711 00:29:37.148705 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-cqxt6_kube-system(92c2ade4-59cc-4e62-b054-56068cb51ff3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-cqxt6_kube-system(92c2ade4-59cc-4e62-b054-56068cb51ff3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-cqxt6" podUID="92c2ade4-59cc-4e62-b054-56068cb51ff3" Jul 11 00:29:37.152369 env[1210]: time="2025-07-11T00:29:37.152317547Z" level=error msg="Failed to destroy network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.152757 env[1210]: time="2025-07-11T00:29:37.152717304Z" level=error msg="encountered an error cleaning up failed sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.152829 env[1210]: time="2025-07-11T00:29:37.152779784Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-bcrzs,Uid:5e7bd041-bfeb-44c3-8199-39d9c2fb02b5,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.153006 kubelet[1948]: E0711 00:29:37.152962 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.153080 kubelet[1948]: E0711 00:29:37.153029 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" Jul 11 00:29:37.153080 kubelet[1948]: E0711 00:29:37.153047 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" Jul 11 00:29:37.153142 kubelet[1948]: E0711 00:29:37.153091 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-55c6f7fb7-bcrzs_calico-apiserver(5e7bd041-bfeb-44c3-8199-39d9c2fb02b5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-55c6f7fb7-bcrzs_calico-apiserver(5e7bd041-bfeb-44c3-8199-39d9c2fb02b5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" podUID="5e7bd041-bfeb-44c3-8199-39d9c2fb02b5" Jul 11 00:29:37.172797 env[1210]: time="2025-07-11T00:29:37.172735859Z" level=error msg="Failed to destroy network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.173148 env[1210]: time="2025-07-11T00:29:37.173113137Z" level=error msg="encountered an error cleaning up failed sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.173225 env[1210]: time="2025-07-11T00:29:37.173168256Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85cc845489-mxllf,Uid:c63522c7-9a2f-4d98-8548-32650e05e81b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.173490 kubelet[1948]: E0711 00:29:37.173440 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.173566 kubelet[1948]: E0711 00:29:37.173518 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85cc845489-mxllf" Jul 11 00:29:37.173566 kubelet[1948]: E0711 00:29:37.173538 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85cc845489-mxllf" Jul 11 00:29:37.173622 kubelet[1948]: E0711 00:29:37.173587 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-85cc845489-mxllf_calico-system(c63522c7-9a2f-4d98-8548-32650e05e81b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-85cc845489-mxllf_calico-system(c63522c7-9a2f-4d98-8548-32650e05e81b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85cc845489-mxllf" podUID="c63522c7-9a2f-4d98-8548-32650e05e81b" Jul 11 00:29:37.183230 env[1210]: time="2025-07-11T00:29:37.183165794Z" level=error msg="Failed to destroy network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.183713 env[1210]: time="2025-07-11T00:29:37.183683071Z" level=error msg="encountered an error cleaning up failed sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.183838 env[1210]: time="2025-07-11T00:29:37.183814470Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-66b6659fdf-6fp9h,Uid:d9ad1df2-e486-4fd8-a8b0-d70e60752567,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.184122 kubelet[1948]: E0711 00:29:37.184091 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.184254 kubelet[1948]: E0711 00:29:37.184139 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-66b6659fdf-6fp9h" Jul 11 00:29:37.184254 kubelet[1948]: E0711 00:29:37.184157 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-66b6659fdf-6fp9h" Jul 11 00:29:37.184254 kubelet[1948]: E0711 00:29:37.184204 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-66b6659fdf-6fp9h_calico-system(d9ad1df2-e486-4fd8-a8b0-d70e60752567)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-66b6659fdf-6fp9h_calico-system(d9ad1df2-e486-4fd8-a8b0-d70e60752567)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-66b6659fdf-6fp9h" podUID="d9ad1df2-e486-4fd8-a8b0-d70e60752567" Jul 11 00:29:37.188873 env[1210]: time="2025-07-11T00:29:37.188756999Z" level=error msg="Failed to destroy network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.189343 env[1210]: time="2025-07-11T00:29:37.189310995Z" level=error msg="encountered an error cleaning up failed sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.189502 env[1210]: time="2025-07-11T00:29:37.189476394Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zhcp8,Uid:7164bfc3-1b61-4f56-8b81-5f68ee41505e,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.189770 kubelet[1948]: E0711 00:29:37.189733 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.189837 kubelet[1948]: E0711 00:29:37.189788 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-zhcp8" Jul 11 00:29:37.189837 kubelet[1948]: E0711 00:29:37.189806 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-zhcp8" Jul 11 00:29:37.189910 kubelet[1948]: E0711 00:29:37.189854 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-zhcp8_kube-system(7164bfc3-1b61-4f56-8b81-5f68ee41505e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-zhcp8_kube-system(7164bfc3-1b61-4f56-8b81-5f68ee41505e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-zhcp8" podUID="7164bfc3-1b61-4f56-8b81-5f68ee41505e" Jul 11 00:29:37.192427 env[1210]: time="2025-07-11T00:29:37.192322257Z" level=error msg="Failed to destroy network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.192832 env[1210]: time="2025-07-11T00:29:37.192802054Z" level=error msg="encountered an error cleaning up failed sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.192942 env[1210]: time="2025-07-11T00:29:37.192918093Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-9rhjl,Uid:acd0bd31-6a75-4031-b009-73135f28132c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.193233 kubelet[1948]: E0711 00:29:37.193199 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.193323 env[1210]: time="2025-07-11T00:29:37.193238051Z" level=error msg="Failed to destroy network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.193365 kubelet[1948]: E0711 00:29:37.193321 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" Jul 11 00:29:37.193365 kubelet[1948]: E0711 00:29:37.193343 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" Jul 11 00:29:37.193696 env[1210]: time="2025-07-11T00:29:37.193661368Z" level=error msg="encountered an error cleaning up failed sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.193752 env[1210]: time="2025-07-11T00:29:37.193718768Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-ltzwj,Uid:5cb126e3-1fdb-4fea-ba79-3db92e5a1116,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.194103 kubelet[1948]: E0711 00:29:37.193929 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.194103 kubelet[1948]: E0711 00:29:37.193943 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-55c6f7fb7-9rhjl_calico-apiserver(acd0bd31-6a75-4031-b009-73135f28132c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-55c6f7fb7-9rhjl_calico-apiserver(acd0bd31-6a75-4031-b009-73135f28132c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" podUID="acd0bd31-6a75-4031-b009-73135f28132c" Jul 11 00:29:37.194103 kubelet[1948]: E0711 00:29:37.193978 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-ltzwj" Jul 11 00:29:37.194233 kubelet[1948]: E0711 00:29:37.193997 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-ltzwj" Jul 11 00:29:37.194233 kubelet[1948]: E0711 00:29:37.194039 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-ltzwj_calico-system(5cb126e3-1fdb-4fea-ba79-3db92e5a1116)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-ltzwj_calico-system(5cb126e3-1fdb-4fea-ba79-3db92e5a1116)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-ltzwj" podUID="5cb126e3-1fdb-4fea-ba79-3db92e5a1116" Jul 11 00:29:37.372461 systemd[1]: Created slice kubepods-besteffort-poda32caaa4_7464_4227_89a9_b3ea02143a93.slice. Jul 11 00:29:37.374819 env[1210]: time="2025-07-11T00:29:37.374787795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vg4d5,Uid:a32caaa4-7464-4227-89a9-b3ea02143a93,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:37.424391 env[1210]: time="2025-07-11T00:29:37.424326605Z" level=error msg="Failed to destroy network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.424705 env[1210]: time="2025-07-11T00:29:37.424661922Z" level=error msg="encountered an error cleaning up failed sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.424748 env[1210]: time="2025-07-11T00:29:37.424713122Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vg4d5,Uid:a32caaa4-7464-4227-89a9-b3ea02143a93,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.424971 kubelet[1948]: E0711 00:29:37.424924 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.425031 kubelet[1948]: E0711 00:29:37.424993 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:37.425063 kubelet[1948]: E0711 00:29:37.425039 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-vg4d5" Jul 11 00:29:37.425111 kubelet[1948]: E0711 00:29:37.425082 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-vg4d5_calico-system(a32caaa4-7464-4227-89a9-b3ea02143a93)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-vg4d5_calico-system(a32caaa4-7464-4227-89a9-b3ea02143a93)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-vg4d5" podUID="a32caaa4-7464-4227-89a9-b3ea02143a93" Jul 11 00:29:37.452676 kubelet[1948]: I0711 00:29:37.452572 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:29:37.454151 env[1210]: time="2025-07-11T00:29:37.454118858Z" level=info msg="StopPodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\"" Jul 11 00:29:37.455420 kubelet[1948]: I0711 00:29:37.455381 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:29:37.455994 env[1210]: time="2025-07-11T00:29:37.455958447Z" level=info msg="StopPodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\"" Jul 11 00:29:37.456871 kubelet[1948]: I0711 00:29:37.456845 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:29:37.457360 env[1210]: time="2025-07-11T00:29:37.457329398Z" level=info msg="StopPodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\"" Jul 11 00:29:37.458718 kubelet[1948]: I0711 00:29:37.458690 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:29:37.459214 env[1210]: time="2025-07-11T00:29:37.459176786Z" level=info msg="StopPodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\"" Jul 11 00:29:37.467358 env[1210]: time="2025-07-11T00:29:37.467312456Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 11 00:29:37.472140 kubelet[1948]: I0711 00:29:37.471241 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:29:37.474909 env[1210]: time="2025-07-11T00:29:37.474851648Z" level=info msg="StopPodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\"" Jul 11 00:29:37.477074 kubelet[1948]: I0711 00:29:37.476352 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:29:37.478608 env[1210]: time="2025-07-11T00:29:37.478566465Z" level=info msg="StopPodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\"" Jul 11 00:29:37.480492 kubelet[1948]: I0711 00:29:37.479888 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:29:37.482229 env[1210]: time="2025-07-11T00:29:37.482189602Z" level=info msg="StopPodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\"" Jul 11 00:29:37.488307 kubelet[1948]: I0711 00:29:37.487727 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:29:37.488545 env[1210]: time="2025-07-11T00:29:37.488505203Z" level=info msg="StopPodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\"" Jul 11 00:29:37.492832 env[1210]: time="2025-07-11T00:29:37.492771576Z" level=error msg="StopPodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" failed" error="failed to destroy network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.493242 kubelet[1948]: E0711 00:29:37.493071 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:29:37.493242 kubelet[1948]: E0711 00:29:37.493133 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c"} Jul 11 00:29:37.493242 kubelet[1948]: E0711 00:29:37.493186 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a32caaa4-7464-4227-89a9-b3ea02143a93\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.493242 kubelet[1948]: E0711 00:29:37.493214 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a32caaa4-7464-4227-89a9-b3ea02143a93\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-vg4d5" podUID="a32caaa4-7464-4227-89a9-b3ea02143a93" Jul 11 00:29:37.516642 env[1210]: time="2025-07-11T00:29:37.516583467Z" level=error msg="StopPodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" failed" error="failed to destroy network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.517008 kubelet[1948]: E0711 00:29:37.516849 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:29:37.517008 kubelet[1948]: E0711 00:29:37.516909 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918"} Jul 11 00:29:37.517008 kubelet[1948]: E0711 00:29:37.516952 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7164bfc3-1b61-4f56-8b81-5f68ee41505e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.517008 kubelet[1948]: E0711 00:29:37.516976 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7164bfc3-1b61-4f56-8b81-5f68ee41505e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-zhcp8" podUID="7164bfc3-1b61-4f56-8b81-5f68ee41505e" Jul 11 00:29:37.519167 env[1210]: time="2025-07-11T00:29:37.519115771Z" level=error msg="StopPodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" failed" error="failed to destroy network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.519511 kubelet[1948]: E0711 00:29:37.519336 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:29:37.519511 kubelet[1948]: E0711 00:29:37.519394 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07"} Jul 11 00:29:37.519511 kubelet[1948]: E0711 00:29:37.519455 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5cb126e3-1fdb-4fea-ba79-3db92e5a1116\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.519511 kubelet[1948]: E0711 00:29:37.519475 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5cb126e3-1fdb-4fea-ba79-3db92e5a1116\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-ltzwj" podUID="5cb126e3-1fdb-4fea-ba79-3db92e5a1116" Jul 11 00:29:37.524708 env[1210]: time="2025-07-11T00:29:37.524660457Z" level=error msg="StopPodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" failed" error="failed to destroy network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.525046 kubelet[1948]: E0711 00:29:37.524906 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:29:37.525046 kubelet[1948]: E0711 00:29:37.524964 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7"} Jul 11 00:29:37.525046 kubelet[1948]: E0711 00:29:37.524994 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.525046 kubelet[1948]: E0711 00:29:37.525013 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-66b6659fdf-6fp9h" podUID="d9ad1df2-e486-4fd8-a8b0-d70e60752567" Jul 11 00:29:37.541367 env[1210]: time="2025-07-11T00:29:37.541308392Z" level=error msg="StopPodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" failed" error="failed to destroy network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.541607 kubelet[1948]: E0711 00:29:37.541562 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:29:37.541659 kubelet[1948]: E0711 00:29:37.541618 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b"} Jul 11 00:29:37.541712 kubelet[1948]: E0711 00:29:37.541659 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.541712 kubelet[1948]: E0711 00:29:37.541685 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" podUID="5e7bd041-bfeb-44c3-8199-39d9c2fb02b5" Jul 11 00:29:37.541808 env[1210]: time="2025-07-11T00:29:37.541635750Z" level=error msg="StopPodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" failed" error="failed to destroy network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.541860 env[1210]: time="2025-07-11T00:29:37.541820709Z" level=error msg="StopPodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" failed" error="failed to destroy network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.542124 kubelet[1948]: E0711 00:29:37.541972 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:29:37.542124 kubelet[1948]: E0711 00:29:37.542004 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472"} Jul 11 00:29:37.542124 kubelet[1948]: E0711 00:29:37.541993 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:29:37.542124 kubelet[1948]: E0711 00:29:37.542031 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"acd0bd31-6a75-4031-b009-73135f28132c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.542124 kubelet[1948]: E0711 00:29:37.542044 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a"} Jul 11 00:29:37.542330 kubelet[1948]: E0711 00:29:37.542048 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"acd0bd31-6a75-4031-b009-73135f28132c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" podUID="acd0bd31-6a75-4031-b009-73135f28132c" Jul 11 00:29:37.542330 kubelet[1948]: E0711 00:29:37.542080 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c63522c7-9a2f-4d98-8548-32650e05e81b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.542330 kubelet[1948]: E0711 00:29:37.542101 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c63522c7-9a2f-4d98-8548-32650e05e81b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85cc845489-mxllf" podUID="c63522c7-9a2f-4d98-8548-32650e05e81b" Jul 11 00:29:37.553667 env[1210]: time="2025-07-11T00:29:37.553603755Z" level=error msg="StopPodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" failed" error="failed to destroy network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:29:37.555028 kubelet[1948]: E0711 00:29:37.553902 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:29:37.555028 kubelet[1948]: E0711 00:29:37.553957 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70"} Jul 11 00:29:37.555028 kubelet[1948]: E0711 00:29:37.553987 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"92c2ade4-59cc-4e62-b054-56068cb51ff3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:29:37.555028 kubelet[1948]: E0711 00:29:37.554017 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"92c2ade4-59cc-4e62-b054-56068cb51ff3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-cqxt6" podUID="92c2ade4-59cc-4e62-b054-56068cb51ff3" Jul 11 00:29:42.074166 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount932843307.mount: Deactivated successfully. Jul 11 00:29:42.182651 env[1210]: time="2025-07-11T00:29:42.182589070Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:42.184065 env[1210]: time="2025-07-11T00:29:42.184024583Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:42.185472 env[1210]: time="2025-07-11T00:29:42.185438015Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:42.186842 env[1210]: time="2025-07-11T00:29:42.186802928Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:42.187324 env[1210]: time="2025-07-11T00:29:42.187287766Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 11 00:29:42.200874 env[1210]: time="2025-07-11T00:29:42.200827417Z" level=info msg="CreateContainer within sandbox \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 11 00:29:42.213263 env[1210]: time="2025-07-11T00:29:42.213211794Z" level=info msg="CreateContainer within sandbox \"3e69b2a5845921bfea41050c52dfbcffcff1ac1d33b4963331249eee82c88c5a\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"abf725d27fa67112d7e846bc1063a6559dcbace37c9a02ec215ed8a4ef233d32\"" Jul 11 00:29:42.213949 env[1210]: time="2025-07-11T00:29:42.213918310Z" level=info msg="StartContainer for \"abf725d27fa67112d7e846bc1063a6559dcbace37c9a02ec215ed8a4ef233d32\"" Jul 11 00:29:42.229549 systemd[1]: Started cri-containerd-abf725d27fa67112d7e846bc1063a6559dcbace37c9a02ec215ed8a4ef233d32.scope. Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.273454 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 11 00:29:42.273517 kernel: audit: type=1400 audit(1752193782.271:1001): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2547 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:42.277986 kernel: audit: type=1300 audit(1752193782.271:1001): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2547 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:42.278054 kernel: audit: type=1327 audit(1752193782.271:1001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162663732356432376661363731313264376538343662633130363361 Jul 11 00:29:42.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162663732356432376661363731313264376538343662633130363361 Jul 11 00:29:42.280595 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.282157 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.283847 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.287423 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.287533 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.290985 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.291043 kernel: audit: type=1400 audit(1752193782.271:1002): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.271000 audit: BPF prog-id=139 op=LOAD Jul 11 00:29:42.271000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2547 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:42.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162663732356432376661363731313264376538343662633130363361 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.272000 audit: BPF prog-id=140 op=LOAD Jul 11 00:29:42.272000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2547 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:42.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162663732356432376661363731313264376538343662633130363361 Jul 11 00:29:42.274000 audit: BPF prog-id=140 op=UNLOAD Jul 11 00:29:42.274000 audit: BPF prog-id=139 op=UNLOAD Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:42.274000 audit: BPF prog-id=141 op=LOAD Jul 11 00:29:42.274000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2547 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:42.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162663732356432376661363731313264376538343662633130363361 Jul 11 00:29:42.298942 env[1210]: time="2025-07-11T00:29:42.298106881Z" level=info msg="StartContainer for \"abf725d27fa67112d7e846bc1063a6559dcbace37c9a02ec215ed8a4ef233d32\" returns successfully" Jul 11 00:29:42.517744 kubelet[1948]: I0711 00:29:42.517665 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-x4mbg" podStartSLOduration=3.063461722 podStartE2EDuration="13.517649122s" podCreationTimestamp="2025-07-11 00:29:29 +0000 UTC" firstStartedPulling="2025-07-11 00:29:31.733712443 +0000 UTC m=+19.538011910" lastFinishedPulling="2025-07-11 00:29:42.187899843 +0000 UTC m=+29.992199310" observedRunningTime="2025-07-11 00:29:42.516937446 +0000 UTC m=+30.321236873" watchObservedRunningTime="2025-07-11 00:29:42.517649122 +0000 UTC m=+30.321948589" Jul 11 00:29:42.540828 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 11 00:29:42.540930 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 11 00:29:42.634502 env[1210]: time="2025-07-11T00:29:42.634464167Z" level=info msg="StopPodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\"" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.787 [INFO][3239] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.788 [INFO][3239] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" iface="eth0" netns="/var/run/netns/cni-0c84c3a1-a6c6-a2f2-791b-cce2bf35c6b1" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.789 [INFO][3239] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" iface="eth0" netns="/var/run/netns/cni-0c84c3a1-a6c6-a2f2-791b-cce2bf35c6b1" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.789 [INFO][3239] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" iface="eth0" netns="/var/run/netns/cni-0c84c3a1-a6c6-a2f2-791b-cce2bf35c6b1" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.789 [INFO][3239] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.790 [INFO][3239] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.905 [INFO][3249] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.907 [INFO][3249] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.907 [INFO][3249] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.916 [WARNING][3249] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.917 [INFO][3249] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.918 [INFO][3249] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:42.921982 env[1210]: 2025-07-11 00:29:42.920 [INFO][3239] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:29:42.922654 env[1210]: time="2025-07-11T00:29:42.922621179Z" level=info msg="TearDown network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" successfully" Jul 11 00:29:42.922729 env[1210]: time="2025-07-11T00:29:42.922713338Z" level=info msg="StopPodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" returns successfully" Jul 11 00:29:42.993056 kubelet[1948]: I0711 00:29:42.992935 1948 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-4crx2\" (UniqueName: \"kubernetes.io/projected/d9ad1df2-e486-4fd8-a8b0-d70e60752567-kube-api-access-4crx2\") pod \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\" (UID: \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\") " Jul 11 00:29:42.993056 kubelet[1948]: I0711 00:29:42.992985 1948 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-backend-key-pair\") pod \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\" (UID: \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\") " Jul 11 00:29:42.993056 kubelet[1948]: I0711 00:29:42.993012 1948 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-ca-bundle\") pod \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\" (UID: \"d9ad1df2-e486-4fd8-a8b0-d70e60752567\") " Jul 11 00:29:42.994569 kubelet[1948]: I0711 00:29:42.994511 1948 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "d9ad1df2-e486-4fd8-a8b0-d70e60752567" (UID: "d9ad1df2-e486-4fd8-a8b0-d70e60752567"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 11 00:29:42.997702 kubelet[1948]: I0711 00:29:42.997661 1948 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d9ad1df2-e486-4fd8-a8b0-d70e60752567-kube-api-access-4crx2" (OuterVolumeSpecName: "kube-api-access-4crx2") pod "d9ad1df2-e486-4fd8-a8b0-d70e60752567" (UID: "d9ad1df2-e486-4fd8-a8b0-d70e60752567"). InnerVolumeSpecName "kube-api-access-4crx2". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 11 00:29:42.997862 kubelet[1948]: I0711 00:29:42.997830 1948 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "d9ad1df2-e486-4fd8-a8b0-d70e60752567" (UID: "d9ad1df2-e486-4fd8-a8b0-d70e60752567"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 11 00:29:43.075055 systemd[1]: run-netns-cni\x2d0c84c3a1\x2da6c6\x2da2f2\x2d791b\x2dcce2bf35c6b1.mount: Deactivated successfully. Jul 11 00:29:43.075163 systemd[1]: var-lib-kubelet-pods-d9ad1df2\x2de486\x2d4fd8\x2da8b0\x2dd70e60752567-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d4crx2.mount: Deactivated successfully. Jul 11 00:29:43.075242 systemd[1]: var-lib-kubelet-pods-d9ad1df2\x2de486\x2d4fd8\x2da8b0\x2dd70e60752567-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 11 00:29:43.093413 kubelet[1948]: I0711 00:29:43.093366 1948 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-4crx2\" (UniqueName: \"kubernetes.io/projected/d9ad1df2-e486-4fd8-a8b0-d70e60752567-kube-api-access-4crx2\") on node \"localhost\" DevicePath \"\"" Jul 11 00:29:43.093413 kubelet[1948]: I0711 00:29:43.093412 1948 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 11 00:29:43.093413 kubelet[1948]: I0711 00:29:43.093423 1948 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d9ad1df2-e486-4fd8-a8b0-d70e60752567-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 11 00:29:43.502525 kubelet[1948]: I0711 00:29:43.502491 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:29:43.505932 systemd[1]: Removed slice kubepods-besteffort-podd9ad1df2_e486_4fd8_a8b0_d70e60752567.slice. Jul 11 00:29:43.879252 systemd[1]: Created slice kubepods-besteffort-podd83c1656_11a1_4070_b036_3dbf570b3862.slice. Jul 11 00:29:43.901532 kubelet[1948]: I0711 00:29:43.899296 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nppnm\" (UniqueName: \"kubernetes.io/projected/d83c1656-11a1-4070-b036-3dbf570b3862-kube-api-access-nppnm\") pod \"whisker-f4cdb7695-7jzc5\" (UID: \"d83c1656-11a1-4070-b036-3dbf570b3862\") " pod="calico-system/whisker-f4cdb7695-7jzc5" Jul 11 00:29:43.901813 kubelet[1948]: I0711 00:29:43.901554 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d83c1656-11a1-4070-b036-3dbf570b3862-whisker-backend-key-pair\") pod \"whisker-f4cdb7695-7jzc5\" (UID: \"d83c1656-11a1-4070-b036-3dbf570b3862\") " pod="calico-system/whisker-f4cdb7695-7jzc5" Jul 11 00:29:43.901813 kubelet[1948]: I0711 00:29:43.901585 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d83c1656-11a1-4070-b036-3dbf570b3862-whisker-ca-bundle\") pod \"whisker-f4cdb7695-7jzc5\" (UID: \"d83c1656-11a1-4070-b036-3dbf570b3862\") " pod="calico-system/whisker-f4cdb7695-7jzc5" Jul 11 00:29:43.903000 audit[3315]: AVC avc: denied { write } for pid=3315 comm="tee" name="fd" dev="proc" ino=20484 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.903000 audit[3315]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd0f1d7e1 a2=241 a3=1b6 items=1 ppid=3280 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.903000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 11 00:29:43.903000 audit: PATH item=0 name="/dev/fd/63" inode=18863 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.903000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:43.924000 audit[3312]: AVC avc: denied { write } for pid=3312 comm="tee" name="fd" dev="proc" ino=18878 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.924000 audit[3312]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffea0417e1 a2=241 a3=1b6 items=1 ppid=3279 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.924000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 11 00:29:43.924000 audit: PATH item=0 name="/dev/fd/63" inode=18369 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.924000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:43.927000 audit[3331]: AVC avc: denied { write } for pid=3331 comm="tee" name="fd" dev="proc" ino=18882 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.927000 audit[3331]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd91dd7d1 a2=241 a3=1b6 items=1 ppid=3287 pid=3331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.927000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 11 00:29:43.927000 audit: PATH item=0 name="/dev/fd/63" inode=19512 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:43.959000 audit[3350]: AVC avc: denied { write } for pid=3350 comm="tee" name="fd" dev="proc" ino=19522 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.959000 audit[3350]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffc28b7e2 a2=241 a3=1b6 items=1 ppid=3282 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.959000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 11 00:29:43.959000 audit: PATH item=0 name="/dev/fd/63" inode=18378 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.959000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:43.968000 audit[3357]: AVC avc: denied { write } for pid=3357 comm="tee" name="fd" dev="proc" ino=20493 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.968000 audit[3357]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc72697d2 a2=241 a3=1b6 items=1 ppid=3290 pid=3357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.968000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 11 00:29:43.968000 audit: PATH item=0 name="/dev/fd/63" inode=19519 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.968000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:43.970000 audit[3355]: AVC avc: denied { write } for pid=3355 comm="tee" name="fd" dev="proc" ino=18382 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.970000 audit[3355]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc1cb37e3 a2=241 a3=1b6 items=1 ppid=3293 pid=3355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.970000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 11 00:29:43.970000 audit: PATH item=0 name="/dev/fd/63" inode=18886 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.970000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:43.986000 audit[3353]: AVC avc: denied { write } for pid=3353 comm="tee" name="fd" dev="proc" ino=19526 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:29:43.986000 audit[3353]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec8087e1 a2=241 a3=1b6 items=1 ppid=3289 pid=3353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:43.986000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 11 00:29:43.986000 audit: PATH item=0 name="/dev/fd/63" inode=20490 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:29:43.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit: BPF prog-id=142 op=LOAD Jul 11 00:29:44.130000 audit[3400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe86a4818 a2=98 a3=ffffe86a4808 items=0 ppid=3284 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.130000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:29:44.130000 audit: BPF prog-id=142 op=UNLOAD Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit: BPF prog-id=143 op=LOAD Jul 11 00:29:44.130000 audit[3400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe86a46c8 a2=74 a3=95 items=0 ppid=3284 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.130000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:29:44.130000 audit: BPF prog-id=143 op=UNLOAD Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { bpf } for pid=3400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit: BPF prog-id=144 op=LOAD Jul 11 00:29:44.130000 audit[3400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe86a46f8 a2=40 a3=ffffe86a4728 items=0 ppid=3284 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.130000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:29:44.130000 audit: BPF prog-id=144 op=UNLOAD Jul 11 00:29:44.130000 audit[3400]: AVC avc: denied { perfmon } for pid=3400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.130000 audit[3400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe86a4810 a2=50 a3=0 items=0 ppid=3284 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.130000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit: BPF prog-id=145 op=LOAD Jul 11 00:29:44.133000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffec1e7a58 a2=98 a3=ffffec1e7a48 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.133000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.133000 audit: BPF prog-id=145 op=UNLOAD Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit: BPF prog-id=146 op=LOAD Jul 11 00:29:44.133000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffec1e76e8 a2=74 a3=95 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.133000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.133000 audit: BPF prog-id=146 op=UNLOAD Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.133000 audit: BPF prog-id=147 op=LOAD Jul 11 00:29:44.133000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffec1e7748 a2=94 a3=2 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.133000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.133000 audit: BPF prog-id=147 op=UNLOAD Jul 11 00:29:44.182351 env[1210]: time="2025-07-11T00:29:44.182312017Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f4cdb7695-7jzc5,Uid:d83c1656-11a1-4070-b036-3dbf570b3862,Namespace:calico-system,Attempt:0,}" Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit: BPF prog-id=148 op=LOAD Jul 11 00:29:44.219000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffec1e7708 a2=40 a3=ffffec1e7738 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.219000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.219000 audit: BPF prog-id=148 op=UNLOAD Jul 11 00:29:44.219000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.219000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffec1e7820 a2=50 a3=0 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.219000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec1e7778 a2=28 a3=ffffec1e78a8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec1e77a8 a2=28 a3=ffffec1e78d8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec1e7658 a2=28 a3=ffffec1e7788 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec1e77c8 a2=28 a3=ffffec1e78f8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec1e77a8 a2=28 a3=ffffec1e78d8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec1e7798 a2=28 a3=ffffec1e78c8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec1e77c8 a2=28 a3=ffffec1e78f8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec1e77a8 a2=28 a3=ffffec1e78d8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec1e77c8 a2=28 a3=ffffec1e78f8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffec1e7798 a2=28 a3=ffffec1e78c8 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.234000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.234000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffec1e7818 a2=28 a3=ffffec1e7958 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffec1e7550 a2=50 a3=0 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit: BPF prog-id=149 op=LOAD Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffec1e7558 a2=94 a3=5 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit: BPF prog-id=149 op=UNLOAD Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffec1e7660 a2=50 a3=0 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffec1e77a8 a2=4 a3=3 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { confidentiality } for pid=3401 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffec1e7788 a2=94 a3=6 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { confidentiality } for pid=3401 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffec1e6f58 a2=94 a3=83 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { perfmon } for pid=3401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { bpf } for pid=3401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.235000 audit[3401]: AVC avc: denied { confidentiality } for pid=3401 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:29:44.235000 audit[3401]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffec1e6f58 a2=94 a3=83 items=0 ppid=3284 pid=3401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.235000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit: BPF prog-id=150 op=LOAD Jul 11 00:29:44.248000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0e0be98 a2=98 a3=ffffd0e0be88 items=0 ppid=3284 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.248000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:29:44.248000 audit: BPF prog-id=150 op=UNLOAD Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit: BPF prog-id=151 op=LOAD Jul 11 00:29:44.248000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0e0bd48 a2=74 a3=95 items=0 ppid=3284 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.248000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:29:44.248000 audit: BPF prog-id=151 op=UNLOAD Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.248000 audit: BPF prog-id=152 op=LOAD Jul 11 00:29:44.248000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0e0bd78 a2=40 a3=ffffd0e0bda8 items=0 ppid=3284 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.248000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:29:44.248000 audit: BPF prog-id=152 op=UNLOAD Jul 11 00:29:44.329888 systemd-networkd[1045]: vxlan.calico: Link UP Jul 11 00:29:44.329894 systemd-networkd[1045]: vxlan.calico: Gained carrier Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit: BPF prog-id=153 op=LOAD Jul 11 00:29:44.344000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedc9d108 a2=98 a3=ffffedc9d0f8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.344000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.344000 audit: BPF prog-id=153 op=UNLOAD Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit: BPF prog-id=154 op=LOAD Jul 11 00:29:44.344000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedc9cde8 a2=74 a3=95 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.344000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.344000 audit: BPF prog-id=154 op=UNLOAD Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.344000 audit: BPF prog-id=155 op=LOAD Jul 11 00:29:44.344000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedc9ce48 a2=94 a3=2 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.344000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit: BPF prog-id=155 op=UNLOAD Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffedc9ce78 a2=28 a3=ffffedc9cfa8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedc9cea8 a2=28 a3=ffffedc9cfd8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedc9cd58 a2=28 a3=ffffedc9ce88 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffedc9cec8 a2=28 a3=ffffedc9cff8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffedc9cea8 a2=28 a3=ffffedc9cfd8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffedc9ce98 a2=28 a3=ffffedc9cfc8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffedc9cec8 a2=28 a3=ffffedc9cff8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedc9cea8 a2=28 a3=ffffedc9cfd8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedc9cec8 a2=28 a3=ffffedc9cff8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedc9ce98 a2=28 a3=ffffedc9cfc8 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffedc9cf18 a2=28 a3=ffffedc9d058 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit: BPF prog-id=156 op=LOAD Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffedc9cd38 a2=40 a3=ffffedc9cd68 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit: BPF prog-id=156 op=UNLOAD Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffedc9cd60 a2=50 a3=0 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffedc9cd60 a2=50 a3=0 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.345000 audit: BPF prog-id=157 op=LOAD Jul 11 00:29:44.345000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffedc9c4c8 a2=94 a3=2 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.345000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.347000 audit: BPF prog-id=157 op=UNLOAD Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { perfmon } for pid=3451 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit[3451]: AVC avc: denied { bpf } for pid=3451 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.347000 audit: BPF prog-id=158 op=LOAD Jul 11 00:29:44.347000 audit[3451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffedc9c658 a2=94 a3=30 items=0 ppid=3284 pid=3451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.347000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit: BPF prog-id=159 op=LOAD Jul 11 00:29:44.351000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedf2e248 a2=98 a3=ffffedf2e238 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.351000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.351000 audit: BPF prog-id=159 op=UNLOAD Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit: BPF prog-id=160 op=LOAD Jul 11 00:29:44.351000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffedf2ded8 a2=74 a3=95 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.351000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.351000 audit: BPF prog-id=160 op=UNLOAD Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.351000 audit: BPF prog-id=161 op=LOAD Jul 11 00:29:44.351000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffedf2df38 a2=94 a3=2 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.351000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.351000 audit: BPF prog-id=161 op=UNLOAD Jul 11 00:29:44.384560 kubelet[1948]: I0711 00:29:44.384467 1948 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="d9ad1df2-e486-4fd8-a8b0-d70e60752567" path="/var/lib/kubelet/pods/d9ad1df2-e486-4fd8-a8b0-d70e60752567/volumes" Jul 11 00:29:44.425554 systemd-networkd[1045]: cali39af4e6e3b3: Link UP Jul 11 00:29:44.427060 systemd-networkd[1045]: cali39af4e6e3b3: Gained carrier Jul 11 00:29:44.427479 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali39af4e6e3b3: link becomes ready Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.263 [INFO][3402] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--f4cdb7695--7jzc5-eth0 whisker-f4cdb7695- calico-system d83c1656-11a1-4070-b036-3dbf570b3862 937 0 2025-07-11 00:29:43 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:f4cdb7695 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-f4cdb7695-7jzc5 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali39af4e6e3b3 [] [] }} ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.263 [INFO][3402] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.310 [INFO][3428] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" HandleID="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Workload="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.311 [INFO][3428] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" HandleID="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Workload="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400048f2b0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-f4cdb7695-7jzc5", "timestamp":"2025-07-11 00:29:44.310479291 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.311 [INFO][3428] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.311 [INFO][3428] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.311 [INFO][3428] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.337 [INFO][3428] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.386 [INFO][3428] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.402 [INFO][3428] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.405 [INFO][3428] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.407 [INFO][3428] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.407 [INFO][3428] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.408 [INFO][3428] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.412 [INFO][3428] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.417 [INFO][3428] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.417 [INFO][3428] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" host="localhost" Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.417 [INFO][3428] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:44.443555 env[1210]: 2025-07-11 00:29:44.417 [INFO][3428] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" HandleID="k8s-pod-network.c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Workload="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.444173 env[1210]: 2025-07-11 00:29:44.419 [INFO][3402] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--f4cdb7695--7jzc5-eth0", GenerateName:"whisker-f4cdb7695-", Namespace:"calico-system", SelfLink:"", UID:"d83c1656-11a1-4070-b036-3dbf570b3862", ResourceVersion:"937", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f4cdb7695", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-f4cdb7695-7jzc5", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali39af4e6e3b3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:44.444173 env[1210]: 2025-07-11 00:29:44.420 [INFO][3402] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.444173 env[1210]: 2025-07-11 00:29:44.420 [INFO][3402] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali39af4e6e3b3 ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.444173 env[1210]: 2025-07-11 00:29:44.430 [INFO][3402] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.444173 env[1210]: 2025-07-11 00:29:44.430 [INFO][3402] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--f4cdb7695--7jzc5-eth0", GenerateName:"whisker-f4cdb7695-", Namespace:"calico-system", SelfLink:"", UID:"d83c1656-11a1-4070-b036-3dbf570b3862", ResourceVersion:"937", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f4cdb7695", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba", Pod:"whisker-f4cdb7695-7jzc5", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali39af4e6e3b3", MAC:"e2:ed:2d:8a:d6:07", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:44.444173 env[1210]: 2025-07-11 00:29:44.441 [INFO][3402] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba" Namespace="calico-system" Pod="whisker-f4cdb7695-7jzc5" WorkloadEndpoint="localhost-k8s-whisker--f4cdb7695--7jzc5-eth0" Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit: BPF prog-id=162 op=LOAD Jul 11 00:29:44.456000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffedf2def8 a2=40 a3=ffffedf2df28 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.456000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.456000 audit: BPF prog-id=162 op=UNLOAD Jul 11 00:29:44.456000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.456000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffedf2e010 a2=50 a3=0 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.456000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffedf2df68 a2=28 a3=ffffedf2e098 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedf2df98 a2=28 a3=ffffedf2e0c8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedf2de48 a2=28 a3=ffffedf2df78 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffedf2dfb8 a2=28 a3=ffffedf2e0e8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffedf2df98 a2=28 a3=ffffedf2e0c8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffedf2df88 a2=28 a3=ffffedf2e0b8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffedf2dfb8 a2=28 a3=ffffedf2e0e8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedf2df98 a2=28 a3=ffffedf2e0c8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedf2dfb8 a2=28 a3=ffffedf2e0e8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffedf2df88 a2=28 a3=ffffedf2e0b8 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffedf2e008 a2=28 a3=ffffedf2e148 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffedf2dd40 a2=50 a3=0 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.465000 audit: BPF prog-id=163 op=LOAD Jul 11 00:29:44.465000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffedf2dd48 a2=94 a3=5 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.465000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.466000 audit: BPF prog-id=163 op=UNLOAD Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffedf2de50 a2=50 a3=0 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.466000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffedf2df98 a2=4 a3=3 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.466000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { confidentiality } for pid=3455 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:29:44.466000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffedf2df78 a2=94 a3=6 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.466000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { confidentiality } for pid=3455 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:29:44.466000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffedf2d748 a2=94 a3=83 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.466000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.466000 audit[3455]: AVC avc: denied { confidentiality } for pid=3455 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:29:44.466000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffedf2d748 a2=94 a3=83 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.466000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.467000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.467000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffedf2f188 a2=10 a3=ffffedf2f278 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.467000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.467000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffedf2f048 a2=10 a3=ffffedf2f138 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.467000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.467000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffedf2efb8 a2=10 a3=ffffedf2f138 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.467000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.467000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffedf2efb8 a2=10 a3=ffffedf2f138 items=0 ppid=3284 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:29:44.476000 audit: BPF prog-id=158 op=UNLOAD Jul 11 00:29:44.511457 env[1210]: time="2025-07-11T00:29:44.511127783Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:44.511457 env[1210]: time="2025-07-11T00:29:44.511180343Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:44.511457 env[1210]: time="2025-07-11T00:29:44.511190822Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:44.511457 env[1210]: time="2025-07-11T00:29:44.511415261Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba pid=3489 runtime=io.containerd.runc.v2 Jul 11 00:29:44.534509 systemd[1]: Started cri-containerd-c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba.scope. Jul 11 00:29:44.563000 audit[3527]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3527 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:44.563000 audit[3527]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc55b64a0 a2=0 a3=ffffb09f4fa8 items=0 ppid=3284 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.563000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:44.568000 audit[3523]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:44.568000 audit[3523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffffc989db0 a2=0 a3=ffffb05d9fa8 items=0 ppid=3284 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.568000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:44.569000 audit[3522]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3522 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:44.569000 audit[3522]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffecacab80 a2=0 a3=ffffbef93fa8 items=0 ppid=3284 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.569000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:44.570000 audit[3524]: NETFILTER_CFG table=filter:104 family=2 entries=39 op=nft_register_chain pid=3524 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:44.570000 audit[3524]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffda3e1ea0 a2=0 a3=ffff91f52fa8 items=0 ppid=3284 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.570000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.593000 audit: BPF prog-id=164 op=LOAD Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3489 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613835643264393664373735643732363135306662663765623136 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3489 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613835643264393664373735643732363135306662663765623136 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit: BPF prog-id=165 op=LOAD Jul 11 00:29:44.594000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3489 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613835643264393664373735643732363135306662663765623136 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit: BPF prog-id=166 op=LOAD Jul 11 00:29:44.594000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3489 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613835643264393664373735643732363135306662663765623136 Jul 11 00:29:44.594000 audit: BPF prog-id=166 op=UNLOAD Jul 11 00:29:44.594000 audit: BPF prog-id=165 op=UNLOAD Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:44.594000 audit: BPF prog-id=167 op=LOAD Jul 11 00:29:44.594000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3489 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613835643264393664373735643732363135306662663765623136 Jul 11 00:29:44.597494 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:44.595000 audit[3542]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:44.595000 audit[3542]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=ffffffc454d0 a2=0 a3=ffffb935afa8 items=0 ppid=3284 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:44.595000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:44.615064 env[1210]: time="2025-07-11T00:29:44.615012092Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f4cdb7695-7jzc5,Uid:d83c1656-11a1-4070-b036-3dbf570b3862,Namespace:calico-system,Attempt:0,} returns sandbox id \"c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba\"" Jul 11 00:29:44.616513 env[1210]: time="2025-07-11T00:29:44.616478325Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 11 00:29:45.548285 kubelet[1948]: I0711 00:29:45.548241 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:29:45.586044 systemd[1]: run-containerd-runc-k8s.io-abf725d27fa67112d7e846bc1063a6559dcbace37c9a02ec215ed8a4ef233d32-runc.VEymfA.mount: Deactivated successfully. Jul 11 00:29:45.639720 env[1210]: time="2025-07-11T00:29:45.639662956Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:45.644143 env[1210]: time="2025-07-11T00:29:45.644095256Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:45.645641 env[1210]: time="2025-07-11T00:29:45.645610769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:45.650968 env[1210]: time="2025-07-11T00:29:45.650926385Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:45.652430 env[1210]: time="2025-07-11T00:29:45.652383218Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 11 00:29:45.655913 env[1210]: time="2025-07-11T00:29:45.655882322Z" level=info msg="CreateContainer within sandbox \"c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 11 00:29:45.670328 env[1210]: time="2025-07-11T00:29:45.670284896Z" level=info msg="CreateContainer within sandbox \"c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"1d0340659e4ccd5640d87fc56dee0be7f5af8e4627e90d172813203026a429dc\"" Jul 11 00:29:45.670894 env[1210]: time="2025-07-11T00:29:45.670869214Z" level=info msg="StartContainer for \"1d0340659e4ccd5640d87fc56dee0be7f5af8e4627e90d172813203026a429dc\"" Jul 11 00:29:45.691687 systemd[1]: Started cri-containerd-1d0340659e4ccd5640d87fc56dee0be7f5af8e4627e90d172813203026a429dc.scope. Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.716000 audit: BPF prog-id=168 op=LOAD Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3489 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:45.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164303334303635396534636364353634306438376663353664656530 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3489 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:45.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164303334303635396534636364353634306438376663353664656530 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit: BPF prog-id=169 op=LOAD Jul 11 00:29:45.719000 audit[3594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3489 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:45.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164303334303635396534636364353634306438376663353664656530 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit: BPF prog-id=170 op=LOAD Jul 11 00:29:45.719000 audit[3594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3489 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:45.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164303334303635396534636364353634306438376663353664656530 Jul 11 00:29:45.719000 audit: BPF prog-id=170 op=UNLOAD Jul 11 00:29:45.719000 audit: BPF prog-id=169 op=UNLOAD Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:45.719000 audit: BPF prog-id=171 op=LOAD Jul 11 00:29:45.719000 audit[3594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3489 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:45.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164303334303635396534636364353634306438376663353664656530 Jul 11 00:29:45.737615 env[1210]: time="2025-07-11T00:29:45.737555950Z" level=info msg="StartContainer for \"1d0340659e4ccd5640d87fc56dee0be7f5af8e4627e90d172813203026a429dc\" returns successfully" Jul 11 00:29:45.739951 env[1210]: time="2025-07-11T00:29:45.739920819Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 11 00:29:45.759000 audit[3611]: AVC avc: denied { search } for pid=3611 comm="nginx" name="crypto" dev="proc" ino=21779 scontext=system_u:system_r:svirt_lxc_net_t:s0:c664,c984 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 11 00:29:45.759000 audit[3611]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffa6cee958 a2=0 a3=0 items=0 ppid=3489 pid=3611 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c664,c984 key=(null) Jul 11 00:29:45.759000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 11 00:29:45.776726 systemd-networkd[1045]: cali39af4e6e3b3: Gained IPv6LL Jul 11 00:29:46.288573 systemd-networkd[1045]: vxlan.calico: Gained IPv6LL Jul 11 00:29:47.214810 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3892880587.mount: Deactivated successfully. Jul 11 00:29:47.381463 env[1210]: time="2025-07-11T00:29:47.381408809Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:47.383037 env[1210]: time="2025-07-11T00:29:47.382993082Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:47.384671 env[1210]: time="2025-07-11T00:29:47.384640275Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:47.386818 env[1210]: time="2025-07-11T00:29:47.386791226Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:47.387484 env[1210]: time="2025-07-11T00:29:47.387455663Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 11 00:29:47.391262 env[1210]: time="2025-07-11T00:29:47.391231447Z" level=info msg="CreateContainer within sandbox \"c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 11 00:29:47.407187 env[1210]: time="2025-07-11T00:29:47.407100179Z" level=info msg="CreateContainer within sandbox \"c1a85d2d96d775d726150fbf7eb16ab97b624a855796abd3add97322a72e5dba\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"45e808ad34c8ebf9910bcdb56ca7db241e9791f0fabf15ba2de3321bd62895d4\"" Jul 11 00:29:47.407866 env[1210]: time="2025-07-11T00:29:47.407839096Z" level=info msg="StartContainer for \"45e808ad34c8ebf9910bcdb56ca7db241e9791f0fabf15ba2de3321bd62895d4\"" Jul 11 00:29:47.424566 systemd[1]: Started cri-containerd-45e808ad34c8ebf9910bcdb56ca7db241e9791f0fabf15ba2de3321bd62895d4.scope. Jul 11 00:29:47.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.454692 kernel: kauditd_printk_skb: 710 callbacks suppressed Jul 11 00:29:47.454801 kernel: audit: type=1400 audit(1752193787.450:1154): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.454831 kernel: audit: type=1400 audit(1752193787.451:1155): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.458204 kernel: audit: type=1400 audit(1752193787.451:1156): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.458262 kernel: audit: type=1400 audit(1752193787.451:1157): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.461909 kernel: audit: type=1400 audit(1752193787.451:1158): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.463766 kernel: audit: type=1400 audit(1752193787.451:1159): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.463806 kernel: audit: type=1400 audit(1752193787.451:1160): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.467408 kernel: audit: type=1400 audit(1752193787.451:1161): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.470038 kernel: audit: type=1400 audit(1752193787.451:1162): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.470075 kernel: audit: type=1400 audit(1752193787.451:1163): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.451000 audit: BPF prog-id=172 op=LOAD Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3489 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435653830386164333463386562663939313062636462353663613764 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3489 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435653830386164333463386562663939313062636462353663613764 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.453000 audit: BPF prog-id=173 op=LOAD Jul 11 00:29:47.453000 audit[3646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3489 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435653830386164333463386562663939313062636462353663613764 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.455000 audit: BPF prog-id=174 op=LOAD Jul 11 00:29:47.455000 audit[3646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3489 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435653830386164333463386562663939313062636462353663613764 Jul 11 00:29:47.457000 audit: BPF prog-id=174 op=UNLOAD Jul 11 00:29:47.457000 audit: BPF prog-id=173 op=UNLOAD Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { perfmon } for pid=3646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit[3646]: AVC avc: denied { bpf } for pid=3646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:47.457000 audit: BPF prog-id=175 op=LOAD Jul 11 00:29:47.457000 audit[3646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3489 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435653830386164333463386562663939313062636462353663613764 Jul 11 00:29:47.487040 env[1210]: time="2025-07-11T00:29:47.486994079Z" level=info msg="StartContainer for \"45e808ad34c8ebf9910bcdb56ca7db241e9791f0fabf15ba2de3321bd62895d4\" returns successfully" Jul 11 00:29:47.536837 kubelet[1948]: I0711 00:29:47.536764 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-f4cdb7695-7jzc5" podStartSLOduration=1.764457336 podStartE2EDuration="4.536746508s" podCreationTimestamp="2025-07-11 00:29:43 +0000 UTC" firstStartedPulling="2025-07-11 00:29:44.616235006 +0000 UTC m=+32.420534473" lastFinishedPulling="2025-07-11 00:29:47.388524178 +0000 UTC m=+35.192823645" observedRunningTime="2025-07-11 00:29:47.534473397 +0000 UTC m=+35.338772864" watchObservedRunningTime="2025-07-11 00:29:47.536746508 +0000 UTC m=+35.341045975" Jul 11 00:29:47.575000 audit[3677]: NETFILTER_CFG table=filter:106 family=2 entries=19 op=nft_register_rule pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:47.575000 audit[3677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd5a3d580 a2=0 a3=1 items=0 ppid=2100 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.575000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:47.586000 audit[3677]: NETFILTER_CFG table=nat:107 family=2 entries=21 op=nft_register_chain pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:47.586000 audit[3677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffd5a3d580 a2=0 a3=1 items=0 ppid=2100 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:47.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:48.370249 env[1210]: time="2025-07-11T00:29:48.368366900Z" level=info msg="StopPodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\"" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.411 [INFO][3695] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.412 [INFO][3695] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" iface="eth0" netns="/var/run/netns/cni-1f140cc8-9a45-2607-e080-3f02bbc04c88" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.412 [INFO][3695] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" iface="eth0" netns="/var/run/netns/cni-1f140cc8-9a45-2607-e080-3f02bbc04c88" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.412 [INFO][3695] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" iface="eth0" netns="/var/run/netns/cni-1f140cc8-9a45-2607-e080-3f02bbc04c88" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.412 [INFO][3695] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.412 [INFO][3695] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.431 [INFO][3704] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.431 [INFO][3704] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.431 [INFO][3704] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.440 [WARNING][3704] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.440 [INFO][3704] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.441 [INFO][3704] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:48.444671 env[1210]: 2025-07-11 00:29:48.443 [INFO][3695] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:29:48.450048 env[1210]: time="2025-07-11T00:29:48.450010204Z" level=info msg="TearDown network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" successfully" Jul 11 00:29:48.450142 env[1210]: time="2025-07-11T00:29:48.450120204Z" level=info msg="StopPodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" returns successfully" Jul 11 00:29:48.454310 env[1210]: time="2025-07-11T00:29:48.454271707Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-9rhjl,Uid:acd0bd31-6a75-4031-b009-73135f28132c,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:29:48.454839 systemd[1]: run-netns-cni\x2d1f140cc8\x2d9a45\x2d2607\x2de080\x2d3f02bbc04c88.mount: Deactivated successfully. Jul 11 00:29:48.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.65:22-10.0.0.1:56184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:48.610649 systemd[1]: Started sshd@7-10.0.0.65:22-10.0.0.1:56184.service. Jul 11 00:29:48.632604 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:29:48.632703 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0fb9dc4a03d: link becomes ready Jul 11 00:29:48.631541 systemd-networkd[1045]: cali0fb9dc4a03d: Link UP Jul 11 00:29:48.632032 systemd-networkd[1045]: cali0fb9dc4a03d: Gained carrier Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.554 [INFO][3713] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0 calico-apiserver-55c6f7fb7- calico-apiserver acd0bd31-6a75-4031-b009-73135f28132c 976 0 2025-07-11 00:29:26 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:55c6f7fb7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-55c6f7fb7-9rhjl eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0fb9dc4a03d [] [] }} ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.554 [INFO][3713] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.581 [INFO][3729] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" HandleID="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.581 [INFO][3729] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" HandleID="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003ac140), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-55c6f7fb7-9rhjl", "timestamp":"2025-07-11 00:29:48.581106265 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.584 [INFO][3729] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.584 [INFO][3729] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.584 [INFO][3729] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.593 [INFO][3729] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.597 [INFO][3729] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.600 [INFO][3729] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.602 [INFO][3729] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.605 [INFO][3729] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.605 [INFO][3729] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.606 [INFO][3729] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269 Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.612 [INFO][3729] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.620 [INFO][3729] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.620 [INFO][3729] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" host="localhost" Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.620 [INFO][3729] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:48.646997 env[1210]: 2025-07-11 00:29:48.620 [INFO][3729] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" HandleID="k8s-pod-network.9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.647698 env[1210]: 2025-07-11 00:29:48.627 [INFO][3713] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"acd0bd31-6a75-4031-b009-73135f28132c", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-55c6f7fb7-9rhjl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0fb9dc4a03d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:48.647698 env[1210]: 2025-07-11 00:29:48.627 [INFO][3713] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.647698 env[1210]: 2025-07-11 00:29:48.627 [INFO][3713] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0fb9dc4a03d ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.647698 env[1210]: 2025-07-11 00:29:48.631 [INFO][3713] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.647698 env[1210]: 2025-07-11 00:29:48.635 [INFO][3713] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"acd0bd31-6a75-4031-b009-73135f28132c", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269", Pod:"calico-apiserver-55c6f7fb7-9rhjl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0fb9dc4a03d", MAC:"46:4c:ea:f5:f1:bb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:48.647698 env[1210]: 2025-07-11 00:29:48.644 [INFO][3713] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-9rhjl" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:29:48.654000 audit[3750]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=3750 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:48.654000 audit[3750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffede75ad0 a2=0 a3=ffffa8dbbfa8 items=0 ppid=3284 pid=3750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.654000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:48.660092 env[1210]: time="2025-07-11T00:29:48.660024140Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:48.660221 env[1210]: time="2025-07-11T00:29:48.660096860Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:48.660221 env[1210]: time="2025-07-11T00:29:48.660132579Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:48.660303 env[1210]: time="2025-07-11T00:29:48.660269699Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269 pid=3757 runtime=io.containerd.runc.v2 Jul 11 00:29:48.662000 audit[3737]: USER_ACCT pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:48.663954 sshd[3737]: Accepted publickey for core from 10.0.0.1 port 56184 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:29:48.663000 audit[3737]: CRED_ACQ pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:48.663000 audit[3737]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff293d5e0 a2=3 a3=1 items=0 ppid=1 pid=3737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.663000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:29:48.665392 sshd[3737]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:29:48.669173 systemd-logind[1201]: New session 8 of user core. Jul 11 00:29:48.669750 systemd[1]: Started session-8.scope. Jul 11 00:29:48.678468 systemd[1]: Started cri-containerd-9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269.scope. Jul 11 00:29:48.688000 audit[3737]: USER_START pid=3737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:48.691000 audit[3784]: CRED_ACQ pid=3784 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit: BPF prog-id=176 op=LOAD Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3757 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963306431363266666132613863646265623462336238316530333136 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3757 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963306431363266666132613863646265623462336238316530333136 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit: BPF prog-id=177 op=LOAD Jul 11 00:29:48.697000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3757 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963306431363266666132613863646265623462336238316530333136 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit: BPF prog-id=178 op=LOAD Jul 11 00:29:48.697000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3757 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963306431363266666132613863646265623462336238316530333136 Jul 11 00:29:48.697000 audit: BPF prog-id=178 op=UNLOAD Jul 11 00:29:48.697000 audit: BPF prog-id=177 op=UNLOAD Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:48.697000 audit: BPF prog-id=179 op=LOAD Jul 11 00:29:48.697000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3757 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:48.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963306431363266666132613863646265623462336238316530333136 Jul 11 00:29:48.699731 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:48.717503 env[1210]: time="2025-07-11T00:29:48.717452104Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-9rhjl,Uid:acd0bd31-6a75-4031-b009-73135f28132c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269\"" Jul 11 00:29:48.721254 env[1210]: time="2025-07-11T00:29:48.721215568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 11 00:29:48.852209 sshd[3737]: pam_unix(sshd:session): session closed for user core Jul 11 00:29:48.851000 audit[3737]: USER_END pid=3737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:48.851000 audit[3737]: CRED_DISP pid=3737 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:48.854579 systemd[1]: session-8.scope: Deactivated successfully. Jul 11 00:29:48.855170 systemd-logind[1201]: Session 8 logged out. Waiting for processes to exit. Jul 11 00:29:48.855251 systemd[1]: sshd@7-10.0.0.65:22-10.0.0.1:56184.service: Deactivated successfully. Jul 11 00:29:48.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.65:22-10.0.0.1:56184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:48.856289 systemd-logind[1201]: Removed session 8. Jul 11 00:29:49.368331 env[1210]: time="2025-07-11T00:29:49.367956793Z" level=info msg="StopPodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\"" Jul 11 00:29:49.368331 env[1210]: time="2025-07-11T00:29:49.368025313Z" level=info msg="StopPodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\"" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.425 [INFO][3820] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.425 [INFO][3820] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" iface="eth0" netns="/var/run/netns/cni-14c26abe-d4ce-bcb0-21f0-97a903ebc49d" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.425 [INFO][3820] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" iface="eth0" netns="/var/run/netns/cni-14c26abe-d4ce-bcb0-21f0-97a903ebc49d" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.425 [INFO][3820] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" iface="eth0" netns="/var/run/netns/cni-14c26abe-d4ce-bcb0-21f0-97a903ebc49d" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.425 [INFO][3820] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.425 [INFO][3820] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.447 [INFO][3846] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.448 [INFO][3846] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.448 [INFO][3846] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.457 [WARNING][3846] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.457 [INFO][3846] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.458 [INFO][3846] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:49.466801 env[1210]: 2025-07-11 00:29:49.464 [INFO][3820] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:29:49.468189 env[1210]: time="2025-07-11T00:29:49.466935839Z" level=info msg="TearDown network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" successfully" Jul 11 00:29:49.468189 env[1210]: time="2025-07-11T00:29:49.466967239Z" level=info msg="StopPodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" returns successfully" Jul 11 00:29:49.468806 env[1210]: time="2025-07-11T00:29:49.468772552Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-ltzwj,Uid:5cb126e3-1fdb-4fea-ba79-3db92e5a1116,Namespace:calico-system,Attempt:1,}" Jul 11 00:29:49.469095 systemd[1]: run-netns-cni\x2d14c26abe\x2dd4ce\x2dbcb0\x2d21f0\x2d97a903ebc49d.mount: Deactivated successfully. Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.418 [INFO][3825] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.418 [INFO][3825] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" iface="eth0" netns="/var/run/netns/cni-ec35a316-0b36-616a-c83c-971cb21959c4" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.419 [INFO][3825] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" iface="eth0" netns="/var/run/netns/cni-ec35a316-0b36-616a-c83c-971cb21959c4" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.419 [INFO][3825] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" iface="eth0" netns="/var/run/netns/cni-ec35a316-0b36-616a-c83c-971cb21959c4" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.419 [INFO][3825] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.419 [INFO][3825] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.459 [INFO][3840] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.459 [INFO][3840] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.459 [INFO][3840] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.470 [WARNING][3840] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.470 [INFO][3840] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.471 [INFO][3840] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:49.476564 env[1210]: 2025-07-11 00:29:49.474 [INFO][3825] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:29:49.478898 env[1210]: time="2025-07-11T00:29:49.478857311Z" level=info msg="TearDown network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" successfully" Jul 11 00:29:49.478898 env[1210]: time="2025-07-11T00:29:49.478897631Z" level=info msg="StopPodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" returns successfully" Jul 11 00:29:49.480620 systemd[1]: run-netns-cni\x2dec35a316\x2d0b36\x2d616a\x2dc83c\x2d971cb21959c4.mount: Deactivated successfully. Jul 11 00:29:49.481730 env[1210]: time="2025-07-11T00:29:49.481701700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85cc845489-mxllf,Uid:c63522c7-9a2f-4d98-8548-32650e05e81b,Namespace:calico-system,Attempt:1,}" Jul 11 00:29:49.593925 systemd-networkd[1045]: calieb4559900dc: Link UP Jul 11 00:29:49.595548 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calieb4559900dc: link becomes ready Jul 11 00:29:49.595334 systemd-networkd[1045]: calieb4559900dc: Gained carrier Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.518 [INFO][3857] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0 goldmane-58fd7646b9- calico-system 5cb126e3-1fdb-4fea-ba79-3db92e5a1116 1010 0 2025-07-11 00:29:30 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-ltzwj eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calieb4559900dc [] [] }} ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.518 [INFO][3857] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.549 [INFO][3886] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" HandleID="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.549 [INFO][3886] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" HandleID="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-ltzwj", "timestamp":"2025-07-11 00:29:49.54937439 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.549 [INFO][3886] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.549 [INFO][3886] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.549 [INFO][3886] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.560 [INFO][3886] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.567 [INFO][3886] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.574 [INFO][3886] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.576 [INFO][3886] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.578 [INFO][3886] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.579 [INFO][3886] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.580 [INFO][3886] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3 Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.584 [INFO][3886] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.590 [INFO][3886] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.590 [INFO][3886] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" host="localhost" Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.590 [INFO][3886] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:49.610804 env[1210]: 2025-07-11 00:29:49.590 [INFO][3886] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" HandleID="k8s-pod-network.eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.611566 env[1210]: 2025-07-11 00:29:49.592 [INFO][3857] cni-plugin/k8s.go 418: Populated endpoint ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"5cb126e3-1fdb-4fea-ba79-3db92e5a1116", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-ltzwj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calieb4559900dc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:49.611566 env[1210]: 2025-07-11 00:29:49.592 [INFO][3857] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.611566 env[1210]: 2025-07-11 00:29:49.592 [INFO][3857] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calieb4559900dc ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.611566 env[1210]: 2025-07-11 00:29:49.594 [INFO][3857] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.611566 env[1210]: 2025-07-11 00:29:49.595 [INFO][3857] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"5cb126e3-1fdb-4fea-ba79-3db92e5a1116", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3", Pod:"goldmane-58fd7646b9-ltzwj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calieb4559900dc", MAC:"8e:7a:7a:97:ab:e0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:49.611566 env[1210]: 2025-07-11 00:29:49.607 [INFO][3857] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3" Namespace="calico-system" Pod="goldmane-58fd7646b9-ltzwj" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:29:49.619000 audit[3926]: NETFILTER_CFG table=filter:109 family=2 entries=48 op=nft_register_chain pid=3926 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:49.619000 audit[3926]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26368 a0=3 a1=ffffcaba8530 a2=0 a3=ffffb8f10fa8 items=0 ppid=3284 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.619000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:49.623767 env[1210]: time="2025-07-11T00:29:49.620767266Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:49.623767 env[1210]: time="2025-07-11T00:29:49.620801345Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:49.623767 env[1210]: time="2025-07-11T00:29:49.620817505Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:49.623767 env[1210]: time="2025-07-11T00:29:49.620924305Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3 pid=3925 runtime=io.containerd.runc.v2 Jul 11 00:29:49.634420 systemd[1]: Started cri-containerd-eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3.scope. Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit: BPF prog-id=180 op=LOAD Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3925 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663664333264396530613964623666666263353634653739653036 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3925 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663664333264396530613964623666666263353634653739653036 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.656000 audit: BPF prog-id=181 op=LOAD Jul 11 00:29:49.656000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3925 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663664333264396530613964623666666263353634653739653036 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit: BPF prog-id=182 op=LOAD Jul 11 00:29:49.657000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3925 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663664333264396530613964623666666263353634653739653036 Jul 11 00:29:49.657000 audit: BPF prog-id=182 op=UNLOAD Jul 11 00:29:49.657000 audit: BPF prog-id=181 op=UNLOAD Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { perfmon } for pid=3936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit[3936]: AVC avc: denied { bpf } for pid=3936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.657000 audit: BPF prog-id=183 op=LOAD Jul 11 00:29:49.657000 audit[3936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3925 pid=3936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663664333264396530613964623666666263353634653739653036 Jul 11 00:29:49.659417 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:49.698681 env[1210]: time="2025-07-11T00:29:49.698634475Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-ltzwj,Uid:5cb126e3-1fdb-4fea-ba79-3db92e5a1116,Namespace:calico-system,Attempt:1,} returns sandbox id \"eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3\"" Jul 11 00:29:49.703477 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:29:49.703871 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali235e2eff655: link becomes ready Jul 11 00:29:49.704306 systemd-networkd[1045]: cali235e2eff655: Link UP Jul 11 00:29:49.704718 systemd-networkd[1045]: cali235e2eff655: Gained carrier Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.534 [INFO][3869] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0 calico-kube-controllers-85cc845489- calico-system c63522c7-9a2f-4d98-8548-32650e05e81b 1009 0 2025-07-11 00:29:30 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:85cc845489 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-85cc845489-mxllf eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali235e2eff655 [] [] }} ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.534 [INFO][3869] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.577 [INFO][3894] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" HandleID="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.577 [INFO][3894] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" HandleID="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d5910), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-85cc845489-mxllf", "timestamp":"2025-07-11 00:29:49.57700988 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.577 [INFO][3894] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.590 [INFO][3894] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.590 [INFO][3894] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.660 [INFO][3894] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.670 [INFO][3894] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.675 [INFO][3894] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.677 [INFO][3894] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.684 [INFO][3894] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.684 [INFO][3894] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.685 [INFO][3894] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33 Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.690 [INFO][3894] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.697 [INFO][3894] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.697 [INFO][3894] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" host="localhost" Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.697 [INFO][3894] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:49.722131 env[1210]: 2025-07-11 00:29:49.697 [INFO][3894] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" HandleID="k8s-pod-network.b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.726922 env[1210]: 2025-07-11 00:29:49.699 [INFO][3869] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0", GenerateName:"calico-kube-controllers-85cc845489-", Namespace:"calico-system", SelfLink:"", UID:"c63522c7-9a2f-4d98-8548-32650e05e81b", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85cc845489", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-85cc845489-mxllf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali235e2eff655", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:49.726922 env[1210]: 2025-07-11 00:29:49.699 [INFO][3869] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.726922 env[1210]: 2025-07-11 00:29:49.699 [INFO][3869] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali235e2eff655 ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.726922 env[1210]: 2025-07-11 00:29:49.703 [INFO][3869] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.726922 env[1210]: 2025-07-11 00:29:49.708 [INFO][3869] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0", GenerateName:"calico-kube-controllers-85cc845489-", Namespace:"calico-system", SelfLink:"", UID:"c63522c7-9a2f-4d98-8548-32650e05e81b", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85cc845489", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33", Pod:"calico-kube-controllers-85cc845489-mxllf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali235e2eff655", MAC:"0e:b8:1d:53:2f:c4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:49.726922 env[1210]: 2025-07-11 00:29:49.719 [INFO][3869] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33" Namespace="calico-system" Pod="calico-kube-controllers-85cc845489-mxllf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:29:49.735000 audit[3969]: NETFILTER_CFG table=filter:110 family=2 entries=44 op=nft_register_chain pid=3969 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:49.735000 audit[3969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21952 a0=3 a1=fffff89be6f0 a2=0 a3=ffffa1155fa8 items=0 ppid=3284 pid=3969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.735000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:49.739436 env[1210]: time="2025-07-11T00:29:49.739352953Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:49.739436 env[1210]: time="2025-07-11T00:29:49.739401033Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:49.739436 env[1210]: time="2025-07-11T00:29:49.739411873Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:49.742171 env[1210]: time="2025-07-11T00:29:49.739521952Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33 pid=3978 runtime=io.containerd.runc.v2 Jul 11 00:29:49.754240 systemd[1]: Started cri-containerd-b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33.scope. Jul 11 00:29:49.763687 systemd[1]: run-containerd-runc-k8s.io-b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33-runc.7DZdAV.mount: Deactivated successfully. Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.791000 audit: BPF prog-id=184 op=LOAD Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238663562663562653866343537626131336264376432343533656263 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238663562663562653866343537626131336264376432343533656263 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.792000 audit: BPF prog-id=185 op=LOAD Jul 11 00:29:49.792000 audit[3988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238663562663562653866343537626131336264376432343533656263 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.793000 audit: BPF prog-id=186 op=LOAD Jul 11 00:29:49.793000 audit[3988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238663562663562653866343537626131336264376432343533656263 Jul 11 00:29:49.794000 audit: BPF prog-id=186 op=UNLOAD Jul 11 00:29:49.794000 audit: BPF prog-id=185 op=UNLOAD Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:49.794000 audit: BPF prog-id=187 op=LOAD Jul 11 00:29:49.794000 audit[3988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3978 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:49.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238663562663562653866343537626131336264376432343533656263 Jul 11 00:29:49.796719 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:49.815758 env[1210]: time="2025-07-11T00:29:49.815700169Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85cc845489-mxllf,Uid:c63522c7-9a2f-4d98-8548-32650e05e81b,Namespace:calico-system,Attempt:1,} returns sandbox id \"b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33\"" Jul 11 00:29:49.872636 systemd-networkd[1045]: cali0fb9dc4a03d: Gained IPv6LL Jul 11 00:29:50.367336 env[1210]: time="2025-07-11T00:29:50.367295134Z" level=info msg="StopPodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\"" Jul 11 00:29:50.368023 env[1210]: time="2025-07-11T00:29:50.367999851Z" level=info msg="StopPodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\"" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.441 [INFO][4028] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.441 [INFO][4028] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" iface="eth0" netns="/var/run/netns/cni-2026fe56-83d8-a5d3-170a-1647ca20257d" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.442 [INFO][4028] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" iface="eth0" netns="/var/run/netns/cni-2026fe56-83d8-a5d3-170a-1647ca20257d" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.442 [INFO][4028] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" iface="eth0" netns="/var/run/netns/cni-2026fe56-83d8-a5d3-170a-1647ca20257d" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.442 [INFO][4028] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.442 [INFO][4028] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.463 [INFO][4049] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.463 [INFO][4049] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.463 [INFO][4049] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.471 [WARNING][4049] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.471 [INFO][4049] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.473 [INFO][4049] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:50.477328 env[1210]: 2025-07-11 00:29:50.475 [INFO][4028] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:29:50.478120 env[1210]: time="2025-07-11T00:29:50.477472388Z" level=info msg="TearDown network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" successfully" Jul 11 00:29:50.478120 env[1210]: time="2025-07-11T00:29:50.477502588Z" level=info msg="StopPodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" returns successfully" Jul 11 00:29:50.478173 kubelet[1948]: E0711 00:29:50.477794 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:50.478632 env[1210]: time="2025-07-11T00:29:50.478604544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zhcp8,Uid:7164bfc3-1b61-4f56-8b81-5f68ee41505e,Namespace:kube-system,Attempt:1,}" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.441 [INFO][4039] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.441 [INFO][4039] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" iface="eth0" netns="/var/run/netns/cni-f613869a-37fa-90ef-a411-6d0e84e945f6" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.442 [INFO][4039] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" iface="eth0" netns="/var/run/netns/cni-f613869a-37fa-90ef-a411-6d0e84e945f6" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.442 [INFO][4039] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" iface="eth0" netns="/var/run/netns/cni-f613869a-37fa-90ef-a411-6d0e84e945f6" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.442 [INFO][4039] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.442 [INFO][4039] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.464 [INFO][4050] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.464 [INFO][4050] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.473 [INFO][4050] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.486 [WARNING][4050] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.486 [INFO][4050] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.488 [INFO][4050] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:50.491815 env[1210]: 2025-07-11 00:29:50.490 [INFO][4039] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:29:50.492381 env[1210]: time="2025-07-11T00:29:50.491978972Z" level=info msg="TearDown network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" successfully" Jul 11 00:29:50.492381 env[1210]: time="2025-07-11T00:29:50.492009932Z" level=info msg="StopPodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" returns successfully" Jul 11 00:29:50.492460 kubelet[1948]: E0711 00:29:50.492431 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:50.493038 env[1210]: time="2025-07-11T00:29:50.493007608Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cqxt6,Uid:92c2ade4-59cc-4e62-b054-56068cb51ff3,Namespace:kube-system,Attempt:1,}" Jul 11 00:29:50.626497 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8979c6012ab: link becomes ready Jul 11 00:29:50.626562 systemd-networkd[1045]: cali8979c6012ab: Link UP Jul 11 00:29:50.628423 systemd-networkd[1045]: cali8979c6012ab: Gained carrier Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.557 [INFO][4066] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0 coredns-7c65d6cfc9- kube-system 7164bfc3-1b61-4f56-8b81-5f68ee41505e 1028 0 2025-07-11 00:29:17 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-zhcp8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali8979c6012ab [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.557 [INFO][4066] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.584 [INFO][4095] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" HandleID="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.584 [INFO][4095] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" HandleID="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c760), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-zhcp8", "timestamp":"2025-07-11 00:29:50.583997217 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.584 [INFO][4095] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.584 [INFO][4095] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.584 [INFO][4095] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.593 [INFO][4095] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.597 [INFO][4095] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.600 [INFO][4095] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.602 [INFO][4095] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.604 [INFO][4095] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.604 [INFO][4095] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.606 [INFO][4095] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709 Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.610 [INFO][4095] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.617 [INFO][4095] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.617 [INFO][4095] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" host="localhost" Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.617 [INFO][4095] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:50.641139 env[1210]: 2025-07-11 00:29:50.617 [INFO][4095] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" HandleID="k8s-pod-network.1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.641887 env[1210]: 2025-07-11 00:29:50.623 [INFO][4066] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7164bfc3-1b61-4f56-8b81-5f68ee41505e", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-zhcp8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8979c6012ab", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:50.641887 env[1210]: 2025-07-11 00:29:50.623 [INFO][4066] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.641887 env[1210]: 2025-07-11 00:29:50.623 [INFO][4066] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8979c6012ab ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.641887 env[1210]: 2025-07-11 00:29:50.626 [INFO][4066] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.641887 env[1210]: 2025-07-11 00:29:50.626 [INFO][4066] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7164bfc3-1b61-4f56-8b81-5f68ee41505e", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709", Pod:"coredns-7c65d6cfc9-zhcp8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8979c6012ab", MAC:"72:64:0f:e8:c0:b3", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:50.641887 env[1210]: 2025-07-11 00:29:50.636 [INFO][4066] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709" Namespace="kube-system" Pod="coredns-7c65d6cfc9-zhcp8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:29:50.650000 audit[4120]: NETFILTER_CFG table=filter:111 family=2 entries=54 op=nft_register_chain pid=4120 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:50.650000 audit[4120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26116 a0=3 a1=ffffd65c8ed0 a2=0 a3=ffffa9c3bfa8 items=0 ppid=3284 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.650000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:50.657791 env[1210]: time="2025-07-11T00:29:50.657722292Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:50.657791 env[1210]: time="2025-07-11T00:29:50.657767771Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:50.657791 env[1210]: time="2025-07-11T00:29:50.657777691Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:50.657981 env[1210]: time="2025-07-11T00:29:50.657909651Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709 pid=4128 runtime=io.containerd.runc.v2 Jul 11 00:29:50.666323 systemd[1]: run-netns-cni\x2d2026fe56\x2d83d8\x2da5d3\x2d170a\x2d1647ca20257d.mount: Deactivated successfully. Jul 11 00:29:50.666462 systemd[1]: run-netns-cni\x2df613869a\x2d37fa\x2d90ef\x2da411\x2d6d0e84e945f6.mount: Deactivated successfully. Jul 11 00:29:50.674438 systemd[1]: run-containerd-runc-k8s.io-1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709-runc.6G06lq.mount: Deactivated successfully. Jul 11 00:29:50.679204 systemd[1]: Started cri-containerd-1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709.scope. Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.728000 audit: BPF prog-id=188 op=LOAD Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4128 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166663135363037616561323136323836393635306465326462323533 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4128 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166663135363037616561323136323836393635306465326462323533 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit: BPF prog-id=189 op=LOAD Jul 11 00:29:50.730000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4128 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166663135363037616561323136323836393635306465326462323533 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit: BPF prog-id=190 op=LOAD Jul 11 00:29:50.730000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4128 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166663135363037616561323136323836393635306465326462323533 Jul 11 00:29:50.730000 audit: BPF prog-id=190 op=UNLOAD Jul 11 00:29:50.730000 audit: BPF prog-id=189 op=UNLOAD Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.730000 audit: BPF prog-id=191 op=LOAD Jul 11 00:29:50.730000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4128 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166663135363037616561323136323836393635306465326462323533 Jul 11 00:29:50.735332 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:50.740613 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:29:50.740694 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali29af6584714: link becomes ready Jul 11 00:29:50.739228 systemd-networkd[1045]: cali29af6584714: Link UP Jul 11 00:29:50.740549 systemd-networkd[1045]: cali29af6584714: Gained carrier Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.557 [INFO][4067] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0 coredns-7c65d6cfc9- kube-system 92c2ade4-59cc-4e62-b054-56068cb51ff3 1027 0 2025-07-11 00:29:17 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-cqxt6 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali29af6584714 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.557 [INFO][4067] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.585 [INFO][4094] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" HandleID="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.585 [INFO][4094] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" HandleID="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137490), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-cqxt6", "timestamp":"2025-07-11 00:29:50.585005853 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.585 [INFO][4094] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.617 [INFO][4094] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.617 [INFO][4094] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.698 [INFO][4094] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.708 [INFO][4094] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.713 [INFO][4094] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.716 [INFO][4094] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.719 [INFO][4094] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.719 [INFO][4094] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.720 [INFO][4094] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.724 [INFO][4094] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.731 [INFO][4094] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.732 [INFO][4094] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" host="localhost" Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.734 [INFO][4094] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:50.765522 env[1210]: 2025-07-11 00:29:50.734 [INFO][4094] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" HandleID="k8s-pod-network.e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.766137 env[1210]: 2025-07-11 00:29:50.737 [INFO][4067] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92c2ade4-59cc-4e62-b054-56068cb51ff3", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-cqxt6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali29af6584714", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:50.766137 env[1210]: 2025-07-11 00:29:50.737 [INFO][4067] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.766137 env[1210]: 2025-07-11 00:29:50.737 [INFO][4067] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali29af6584714 ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.766137 env[1210]: 2025-07-11 00:29:50.747 [INFO][4067] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.766137 env[1210]: 2025-07-11 00:29:50.748 [INFO][4067] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92c2ade4-59cc-4e62-b054-56068cb51ff3", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac", Pod:"coredns-7c65d6cfc9-cqxt6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali29af6584714", MAC:"9e:b1:c8:4d:6e:f2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:50.766137 env[1210]: 2025-07-11 00:29:50.762 [INFO][4067] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cqxt6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:29:50.773020 env[1210]: time="2025-07-11T00:29:50.772979686Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-zhcp8,Uid:7164bfc3-1b61-4f56-8b81-5f68ee41505e,Namespace:kube-system,Attempt:1,} returns sandbox id \"1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709\"" Jul 11 00:29:50.773919 kubelet[1948]: E0711 00:29:50.773897 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:50.773000 audit[4172]: NETFILTER_CFG table=filter:112 family=2 entries=54 op=nft_register_chain pid=4172 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:50.773000 audit[4172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25572 a0=3 a1=ffffd7ec9150 a2=0 a3=ffff94625fa8 items=0 ppid=3284 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.773000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:50.776081 env[1210]: time="2025-07-11T00:29:50.776049674Z" level=info msg="CreateContainer within sandbox \"1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:29:50.830605 env[1210]: time="2025-07-11T00:29:50.828737111Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:50.830605 env[1210]: time="2025-07-11T00:29:50.828781390Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:50.830605 env[1210]: time="2025-07-11T00:29:50.828791550Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:50.830605 env[1210]: time="2025-07-11T00:29:50.828909270Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac pid=4179 runtime=io.containerd.runc.v2 Jul 11 00:29:50.833922 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3730424532.mount: Deactivated successfully. Jul 11 00:29:50.836243 env[1210]: time="2025-07-11T00:29:50.836194202Z" level=info msg="CreateContainer within sandbox \"1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"97629e7700e469f961ae7d99f4af203fe0ad95d17307623716f61492fc55d75e\"" Jul 11 00:29:50.836766 env[1210]: time="2025-07-11T00:29:50.836738080Z" level=info msg="StartContainer for \"97629e7700e469f961ae7d99f4af203fe0ad95d17307623716f61492fc55d75e\"" Jul 11 00:29:50.844817 systemd[1]: Started cri-containerd-e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac.scope. Jul 11 00:29:50.859443 systemd[1]: Started cri-containerd-97629e7700e469f961ae7d99f4af203fe0ad95d17307623716f61492fc55d75e.scope. Jul 11 00:29:50.897623 env[1210]: time="2025-07-11T00:29:50.897518685Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:50.899961 env[1210]: time="2025-07-11T00:29:50.899920596Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:50.904231 env[1210]: time="2025-07-11T00:29:50.904200819Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:50.906123 env[1210]: time="2025-07-11T00:29:50.906073452Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:50.906559 env[1210]: time="2025-07-11T00:29:50.906533730Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.905000 audit: BPF prog-id=192 op=LOAD Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4179 pid=4189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376532303339333666336566396133666262313566663161323336 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4179 pid=4189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376532303339333666336566396133666262313566663161323336 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.906000 audit: BPF prog-id=193 op=LOAD Jul 11 00:29:50.906000 audit[4189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4179 pid=4189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376532303339333666336566396133666262313566663161323336 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit: BPF prog-id=194 op=LOAD Jul 11 00:29:50.907000 audit[4189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4179 pid=4189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376532303339333666336566396133666262313566663161323336 Jul 11 00:29:50.907000 audit: BPF prog-id=194 op=UNLOAD Jul 11 00:29:50.907000 audit: BPF prog-id=193 op=UNLOAD Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { perfmon } for pid=4189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit[4189]: AVC avc: denied { bpf } for pid=4189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.907000 audit: BPF prog-id=195 op=LOAD Jul 11 00:29:50.907000 audit[4189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4179 pid=4189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376532303339333666336566396133666262313566663161323336 Jul 11 00:29:50.910895 env[1210]: time="2025-07-11T00:29:50.909013720Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 11 00:29:50.910004 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:50.911353 env[1210]: time="2025-07-11T00:29:50.911324391Z" level=info msg="CreateContainer within sandbox \"9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:29:50.950849 env[1210]: time="2025-07-11T00:29:50.950793559Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cqxt6,Uid:92c2ade4-59cc-4e62-b054-56068cb51ff3,Namespace:kube-system,Attempt:1,} returns sandbox id \"e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac\"" Jul 11 00:29:50.951755 kubelet[1948]: E0711 00:29:50.951728 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:50.955050 env[1210]: time="2025-07-11T00:29:50.954985823Z" level=info msg="CreateContainer within sandbox \"9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"67602876c2bd2d992d2742381a6f394d19cd7ad9f5488b04b453e32a4edaac8f\"" Jul 11 00:29:50.955367 env[1210]: time="2025-07-11T00:29:50.955340341Z" level=info msg="CreateContainer within sandbox \"e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:29:50.956748 env[1210]: time="2025-07-11T00:29:50.956704496Z" level=info msg="StartContainer for \"67602876c2bd2d992d2742381a6f394d19cd7ad9f5488b04b453e32a4edaac8f\"" Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.960000 audit: BPF prog-id=196 op=LOAD Jul 11 00:29:50.961000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.961000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4128 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937363239653737303065343639663936316165376439396634616632 Jul 11 00:29:50.961000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.961000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4128 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937363239653737303065343639663936316165376439396634616632 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit: BPF prog-id=197 op=LOAD Jul 11 00:29:50.963000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4128 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937363239653737303065343639663936316165376439396634616632 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit: BPF prog-id=198 op=LOAD Jul 11 00:29:50.963000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4128 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937363239653737303065343639663936316165376439396634616632 Jul 11 00:29:50.963000 audit: BPF prog-id=198 op=UNLOAD Jul 11 00:29:50.963000 audit: BPF prog-id=197 op=UNLOAD Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:50.963000 audit: BPF prog-id=199 op=LOAD Jul 11 00:29:50.963000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4128 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:50.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937363239653737303065343639663936316165376439396634616632 Jul 11 00:29:50.994348 env[1210]: time="2025-07-11T00:29:50.992422198Z" level=info msg="CreateContainer within sandbox \"e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"d8ea2ee6328b229c960a8a7aa884237ee4d2c0ccfe10f78a812a4055d15268ba\"" Jul 11 00:29:50.994348 env[1210]: time="2025-07-11T00:29:50.993009596Z" level=info msg="StartContainer for \"d8ea2ee6328b229c960a8a7aa884237ee4d2c0ccfe10f78a812a4055d15268ba\"" Jul 11 00:29:50.999218 env[1210]: time="2025-07-11T00:29:50.999144852Z" level=info msg="StartContainer for \"97629e7700e469f961ae7d99f4af203fe0ad95d17307623716f61492fc55d75e\" returns successfully" Jul 11 00:29:51.004746 systemd[1]: Started cri-containerd-67602876c2bd2d992d2742381a6f394d19cd7ad9f5488b04b453e32a4edaac8f.scope. Jul 11 00:29:51.016286 systemd[1]: Started cri-containerd-d8ea2ee6328b229c960a8a7aa884237ee4d2c0ccfe10f78a812a4055d15268ba.scope. Jul 11 00:29:51.024811 systemd-networkd[1045]: cali235e2eff655: Gained IPv6LL Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.030000 audit: BPF prog-id=200 op=LOAD Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3757 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637363032383736633262643264393932643237343233383161366633 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3757 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637363032383736633262643264393932643237343233383161366633 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.031000 audit: BPF prog-id=201 op=LOAD Jul 11 00:29:51.031000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3757 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637363032383736633262643264393932643237343233383161366633 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit: BPF prog-id=202 op=LOAD Jul 11 00:29:51.033000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3757 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637363032383736633262643264393932643237343233383161366633 Jul 11 00:29:51.033000 audit: BPF prog-id=202 op=UNLOAD Jul 11 00:29:51.033000 audit: BPF prog-id=201 op=UNLOAD Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.033000 audit: BPF prog-id=203 op=LOAD Jul 11 00:29:51.033000 audit[4251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3757 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637363032383736633262643264393932643237343233383161366633 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.043000 audit: BPF prog-id=204 op=LOAD Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4179 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438656132656536333238623232396339363061386137616138383432 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4179 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438656132656536333238623232396339363061386137616138383432 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.044000 audit: BPF prog-id=205 op=LOAD Jul 11 00:29:51.044000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4179 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438656132656536333238623232396339363061386137616138383432 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit: BPF prog-id=206 op=LOAD Jul 11 00:29:51.047000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4179 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438656132656536333238623232396339363061386137616138383432 Jul 11 00:29:51.047000 audit: BPF prog-id=206 op=UNLOAD Jul 11 00:29:51.047000 audit: BPF prog-id=205 op=UNLOAD Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { perfmon } for pid=4274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit[4274]: AVC avc: denied { bpf } for pid=4274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:51.047000 audit: BPF prog-id=207 op=LOAD Jul 11 00:29:51.047000 audit[4274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4179 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438656132656536333238623232396339363061386137616138383432 Jul 11 00:29:51.078012 env[1210]: time="2025-07-11T00:29:51.077960396Z" level=info msg="StartContainer for \"d8ea2ee6328b229c960a8a7aa884237ee4d2c0ccfe10f78a812a4055d15268ba\" returns successfully" Jul 11 00:29:51.080344 env[1210]: time="2025-07-11T00:29:51.080302347Z" level=info msg="StartContainer for \"67602876c2bd2d992d2742381a6f394d19cd7ad9f5488b04b453e32a4edaac8f\" returns successfully" Jul 11 00:29:51.089000 audit[4297]: AVC avc: denied { getattr } for pid=4297 comm="coredns" path="cgroup:[4026532219]" dev="nsfs" ino=4026532219 scontext=system_u:system_r:svirt_lxc_net_t:s0:c60,c990 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:29:51.089000 audit[4297]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000154ac8 a2=4000156578 a3=0 items=0 ppid=4179 pid=4297 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c60,c990 key=(null) Jul 11 00:29:51.089000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:29:51.090000 audit[4228]: AVC avc: denied { getattr } for pid=4228 comm="coredns" path="cgroup:[4026532213]" dev="nsfs" ino=4026532213 scontext=system_u:system_r:svirt_lxc_net_t:s0:c226,c376 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:29:51.090000 audit[4228]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000569c0 a2=40000da578 a3=0 items=0 ppid=4128 pid=4228 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c226,c376 key=(null) Jul 11 00:29:51.090000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:29:51.533101 kubelet[1948]: E0711 00:29:51.533044 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:51.536561 systemd-networkd[1045]: calieb4559900dc: Gained IPv6LL Jul 11 00:29:51.539488 kubelet[1948]: E0711 00:29:51.539456 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:51.550251 kubelet[1948]: I0711 00:29:51.550183 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-cqxt6" podStartSLOduration=34.550164625 podStartE2EDuration="34.550164625s" podCreationTimestamp="2025-07-11 00:29:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:51.546838557 +0000 UTC m=+39.351138024" watchObservedRunningTime="2025-07-11 00:29:51.550164625 +0000 UTC m=+39.354464132" Jul 11 00:29:51.563171 kubelet[1948]: I0711 00:29:51.563093 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-55c6f7fb7-9rhjl" podStartSLOduration=23.374454907 podStartE2EDuration="25.563069376s" podCreationTimestamp="2025-07-11 00:29:26 +0000 UTC" firstStartedPulling="2025-07-11 00:29:48.719191296 +0000 UTC m=+36.523490763" lastFinishedPulling="2025-07-11 00:29:50.907805765 +0000 UTC m=+38.712105232" observedRunningTime="2025-07-11 00:29:51.560595106 +0000 UTC m=+39.364894573" watchObservedRunningTime="2025-07-11 00:29:51.563069376 +0000 UTC m=+39.367368803" Jul 11 00:29:51.571000 audit[4339]: NETFILTER_CFG table=filter:113 family=2 entries=18 op=nft_register_rule pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:51.571000 audit[4339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff54a6150 a2=0 a3=1 items=0 ppid=2100 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.571000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:51.580000 audit[4339]: NETFILTER_CFG table=nat:114 family=2 entries=16 op=nft_register_rule pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:51.580000 audit[4339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffff54a6150 a2=0 a3=1 items=0 ppid=2100 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:51.587120 kubelet[1948]: I0711 00:29:51.587048 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-zhcp8" podStartSLOduration=34.587032007 podStartE2EDuration="34.587032007s" podCreationTimestamp="2025-07-11 00:29:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:51.58619401 +0000 UTC m=+39.390493477" watchObservedRunningTime="2025-07-11 00:29:51.587032007 +0000 UTC m=+39.391331474" Jul 11 00:29:51.597000 audit[4341]: NETFILTER_CFG table=filter:115 family=2 entries=15 op=nft_register_rule pid=4341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:51.597000 audit[4341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe84b2910 a2=0 a3=1 items=0 ppid=2100 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.597000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:51.604000 audit[4341]: NETFILTER_CFG table=nat:116 family=2 entries=37 op=nft_register_chain pid=4341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:51.604000 audit[4341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffe84b2910 a2=0 a3=1 items=0 ppid=2100 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:51.604000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:51.728626 systemd-networkd[1045]: cali8979c6012ab: Gained IPv6LL Jul 11 00:29:52.369525 systemd-networkd[1045]: cali29af6584714: Gained IPv6LL Jul 11 00:29:52.370866 env[1210]: time="2025-07-11T00:29:52.370830866Z" level=info msg="StopPodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\"" Jul 11 00:29:52.450820 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4054895482.mount: Deactivated successfully. Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.430 [INFO][4355] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.430 [INFO][4355] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" iface="eth0" netns="/var/run/netns/cni-b7ea1593-a13a-d91b-c250-5aa5945e4d51" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.430 [INFO][4355] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" iface="eth0" netns="/var/run/netns/cni-b7ea1593-a13a-d91b-c250-5aa5945e4d51" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.431 [INFO][4355] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" iface="eth0" netns="/var/run/netns/cni-b7ea1593-a13a-d91b-c250-5aa5945e4d51" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.431 [INFO][4355] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.431 [INFO][4355] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.469 [INFO][4363] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.470 [INFO][4363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.471 [INFO][4363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.479 [WARNING][4363] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.480 [INFO][4363] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.482 [INFO][4363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:52.489494 env[1210]: 2025-07-11 00:29:52.484 [INFO][4355] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:29:52.493376 env[1210]: time="2025-07-11T00:29:52.489619113Z" level=info msg="TearDown network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" successfully" Jul 11 00:29:52.493376 env[1210]: time="2025-07-11T00:29:52.489648953Z" level=info msg="StopPodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" returns successfully" Jul 11 00:29:52.493376 env[1210]: time="2025-07-11T00:29:52.490196231Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vg4d5,Uid:a32caaa4-7464-4227-89a9-b3ea02143a93,Namespace:calico-system,Attempt:1,}" Jul 11 00:29:52.491784 systemd[1]: run-netns-cni\x2db7ea1593\x2da13a\x2dd91b\x2dc250\x2d5aa5945e4d51.mount: Deactivated successfully. Jul 11 00:29:52.540951 kubelet[1948]: I0711 00:29:52.540916 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:29:52.541511 kubelet[1948]: E0711 00:29:52.541266 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:52.541511 kubelet[1948]: E0711 00:29:52.541493 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:52.630000 audit[4396]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:52.636053 kernel: kauditd_printk_skb: 553 callbacks suppressed Jul 11 00:29:52.636151 kernel: audit: type=1325 audit(1752193792.630:1338): table=filter:117 family=2 entries=12 op=nft_register_rule pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:52.636182 kernel: audit: type=1300 audit(1752193792.630:1338): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffc72a280 a2=0 a3=1 items=0 ppid=2100 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.630000 audit[4396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffc72a280 a2=0 a3=1 items=0 ppid=2100 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.638776 kernel: audit: type=1327 audit(1752193792.630:1338): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:52.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:52.645868 systemd-networkd[1045]: calic11448eaa4b: Link UP Jul 11 00:29:52.648035 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:29:52.648111 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic11448eaa4b: link becomes ready Jul 11 00:29:52.648157 systemd-networkd[1045]: calic11448eaa4b: Gained carrier Jul 11 00:29:52.661000 audit[4396]: NETFILTER_CFG table=nat:118 family=2 entries=58 op=nft_register_chain pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:52.665481 kernel: audit: type=1325 audit(1752193792.661:1339): table=nat:118 family=2 entries=58 op=nft_register_chain pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:52.661000 audit[4396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffffc72a280 a2=0 a3=1 items=0 ppid=2100 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.564 [INFO][4371] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--vg4d5-eth0 csi-node-driver- calico-system a32caaa4-7464-4227-89a9-b3ea02143a93 1079 0 2025-07-11 00:29:30 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-vg4d5 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calic11448eaa4b [] [] }} ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.564 [INFO][4371] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.594 [INFO][4387] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" HandleID="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.594 [INFO][4387] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" HandleID="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-vg4d5", "timestamp":"2025-07-11 00:29:52.594207132 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.594 [INFO][4387] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.595 [INFO][4387] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.595 [INFO][4387] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.605 [INFO][4387] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.610 [INFO][4387] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.614 [INFO][4387] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.616 [INFO][4387] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.619 [INFO][4387] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.619 [INFO][4387] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.621 [INFO][4387] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5 Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.624 [INFO][4387] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.632 [INFO][4387] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.632 [INFO][4387] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" host="localhost" Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.632 [INFO][4387] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:52.666136 env[1210]: 2025-07-11 00:29:52.632 [INFO][4387] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" HandleID="k8s-pod-network.55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.666668 env[1210]: 2025-07-11 00:29:52.640 [INFO][4371] cni-plugin/k8s.go 418: Populated endpoint ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vg4d5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a32caaa4-7464-4227-89a9-b3ea02143a93", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-vg4d5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic11448eaa4b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:52.666668 env[1210]: 2025-07-11 00:29:52.640 [INFO][4371] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.666668 env[1210]: 2025-07-11 00:29:52.640 [INFO][4371] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic11448eaa4b ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.666668 env[1210]: 2025-07-11 00:29:52.646 [INFO][4371] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.666668 env[1210]: 2025-07-11 00:29:52.648 [INFO][4371] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vg4d5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a32caaa4-7464-4227-89a9-b3ea02143a93", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5", Pod:"csi-node-driver-vg4d5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic11448eaa4b", MAC:"76:d8:dd:4d:8f:01", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:52.666668 env[1210]: 2025-07-11 00:29:52.659 [INFO][4371] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5" Namespace="calico-system" Pod="csi-node-driver-vg4d5" WorkloadEndpoint="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:29:52.661000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:52.670445 kernel: audit: type=1300 audit(1752193792.661:1339): arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffffc72a280 a2=0 a3=1 items=0 ppid=2100 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.670520 kernel: audit: type=1327 audit(1752193792.661:1339): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:52.680134 env[1210]: time="2025-07-11T00:29:52.680003099Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:52.680134 env[1210]: time="2025-07-11T00:29:52.680074099Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:52.680134 env[1210]: time="2025-07-11T00:29:52.680085499Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:52.680307 env[1210]: time="2025-07-11T00:29:52.680244138Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5 pid=4413 runtime=io.containerd.runc.v2 Jul 11 00:29:52.685000 audit[4420]: NETFILTER_CFG table=filter:119 family=2 entries=52 op=nft_register_chain pid=4420 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:52.685000 audit[4420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24312 a0=3 a1=ffffd5baa630 a2=0 a3=ffffa958ffa8 items=0 ppid=3284 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.691533 kernel: audit: type=1325 audit(1752193792.685:1340): table=filter:119 family=2 entries=52 op=nft_register_chain pid=4420 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:52.691597 kernel: audit: type=1300 audit(1752193792.685:1340): arch=c00000b7 syscall=211 success=yes exit=24312 a0=3 a1=ffffd5baa630 a2=0 a3=ffffa958ffa8 items=0 ppid=3284 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.691628 kernel: audit: type=1327 audit(1752193792.685:1340): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:52.685000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:52.728700 systemd[1]: Started cri-containerd-55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5.scope. Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.749412 kernel: audit: type=1400 audit(1752193792.745:1341): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.747000 audit: BPF prog-id=208 op=LOAD Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535616133356661666539343661623733373733376331303864366236 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535616133356661666539343661623733373733376331303864366236 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit: BPF prog-id=209 op=LOAD Jul 11 00:29:52.748000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535616133356661666539343661623733373733376331303864366236 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit: BPF prog-id=210 op=LOAD Jul 11 00:29:52.748000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535616133356661666539343661623733373733376331303864366236 Jul 11 00:29:52.748000 audit: BPF prog-id=210 op=UNLOAD Jul 11 00:29:52.748000 audit: BPF prog-id=209 op=UNLOAD Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:52.748000 audit: BPF prog-id=211 op=LOAD Jul 11 00:29:52.748000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:52.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535616133356661666539343661623733373733376331303864366236 Jul 11 00:29:52.756488 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:52.769235 env[1210]: time="2025-07-11T00:29:52.769175934Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vg4d5,Uid:a32caaa4-7464-4227-89a9-b3ea02143a93,Namespace:calico-system,Attempt:1,} returns sandbox id \"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5\"" Jul 11 00:29:52.866000 audit[4276]: AVC avc: denied { watch } for pid=4276 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_29_36.814208804/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c870,c897 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c870,c897 tclass=file permissive=0 Jul 11 00:29:52.866000 audit[4276]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000055aa0 a2=fc6 a3=0 items=0 ppid=3757 pid=4276 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c870,c897 key=(null) Jul 11 00:29:52.866000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:29:53.254774 env[1210]: time="2025-07-11T00:29:53.254610510Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:53.256284 env[1210]: time="2025-07-11T00:29:53.256248665Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:53.257739 env[1210]: time="2025-07-11T00:29:53.257711179Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:53.259177 env[1210]: time="2025-07-11T00:29:53.259141374Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:53.259860 env[1210]: time="2025-07-11T00:29:53.259832292Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 11 00:29:53.262420 env[1210]: time="2025-07-11T00:29:53.261366247Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 11 00:29:53.263327 env[1210]: time="2025-07-11T00:29:53.263301320Z" level=info msg="CreateContainer within sandbox \"eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 11 00:29:53.278064 env[1210]: time="2025-07-11T00:29:53.278016548Z" level=info msg="CreateContainer within sandbox \"eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"94ffdfe77dbd2d6e7d40a17e031ae92269735dec247e268ab7dccef8dc8a2881\"" Jul 11 00:29:53.278600 env[1210]: time="2025-07-11T00:29:53.278573266Z" level=info msg="StartContainer for \"94ffdfe77dbd2d6e7d40a17e031ae92269735dec247e268ab7dccef8dc8a2881\"" Jul 11 00:29:53.292834 systemd[1]: Started cri-containerd-94ffdfe77dbd2d6e7d40a17e031ae92269735dec247e268ab7dccef8dc8a2881.scope. Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit: BPF prog-id=212 op=LOAD Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3925 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666664666537376462643264366537643430613137653033316165 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3925 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666664666537376462643264366537643430613137653033316165 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit: BPF prog-id=213 op=LOAD Jul 11 00:29:53.316000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3925 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666664666537376462643264366537643430613137653033316165 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit: BPF prog-id=214 op=LOAD Jul 11 00:29:53.316000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3925 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666664666537376462643264366537643430613137653033316165 Jul 11 00:29:53.316000 audit: BPF prog-id=214 op=UNLOAD Jul 11 00:29:53.316000 audit: BPF prog-id=213 op=UNLOAD Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.316000 audit: BPF prog-id=215 op=LOAD Jul 11 00:29:53.316000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3925 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666664666537376462643264366537643430613137653033316165 Jul 11 00:29:53.340781 env[1210]: time="2025-07-11T00:29:53.340738205Z" level=info msg="StartContainer for \"94ffdfe77dbd2d6e7d40a17e031ae92269735dec247e268ab7dccef8dc8a2881\" returns successfully" Jul 11 00:29:53.368666 env[1210]: time="2025-07-11T00:29:53.368626386Z" level=info msg="StopPodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\"" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.422 [INFO][4492] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.422 [INFO][4492] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" iface="eth0" netns="/var/run/netns/cni-1ab0ec51-3ca0-0048-1a87-c170f4cea01d" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.422 [INFO][4492] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" iface="eth0" netns="/var/run/netns/cni-1ab0ec51-3ca0-0048-1a87-c170f4cea01d" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.423 [INFO][4492] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" iface="eth0" netns="/var/run/netns/cni-1ab0ec51-3ca0-0048-1a87-c170f4cea01d" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.423 [INFO][4492] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.423 [INFO][4492] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.447 [INFO][4502] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.448 [INFO][4502] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.448 [INFO][4502] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.456 [WARNING][4502] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.456 [INFO][4502] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.458 [INFO][4502] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:53.461264 env[1210]: 2025-07-11 00:29:53.459 [INFO][4492] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:29:53.462105 env[1210]: time="2025-07-11T00:29:53.462066695Z" level=info msg="TearDown network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" successfully" Jul 11 00:29:53.462191 env[1210]: time="2025-07-11T00:29:53.462175215Z" level=info msg="StopPodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" returns successfully" Jul 11 00:29:53.462899 env[1210]: time="2025-07-11T00:29:53.462863692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-bcrzs,Uid:5e7bd041-bfeb-44c3-8199-39d9c2fb02b5,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:29:53.547560 kubelet[1948]: E0711 00:29:53.545987 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:53.547560 kubelet[1948]: E0711 00:29:53.546553 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:29:53.563775 kubelet[1948]: I0711 00:29:53.562803 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-ltzwj" podStartSLOduration=20.004000471 podStartE2EDuration="23.562785218s" podCreationTimestamp="2025-07-11 00:29:30 +0000 UTC" firstStartedPulling="2025-07-11 00:29:49.702200941 +0000 UTC m=+37.506500368" lastFinishedPulling="2025-07-11 00:29:53.260985648 +0000 UTC m=+41.065285115" observedRunningTime="2025-07-11 00:29:53.557985795 +0000 UTC m=+41.362285262" watchObservedRunningTime="2025-07-11 00:29:53.562785218 +0000 UTC m=+41.367084645" Jul 11 00:29:53.576000 audit[4542]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:53.576000 audit[4542]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffca0a4950 a2=0 a3=1 items=0 ppid=2100 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.576000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:53.580000 audit[4542]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:53.580000 audit[4542]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffca0a4950 a2=0 a3=1 items=0 ppid=2100 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:53.603499 systemd-networkd[1045]: cali283e05f5d8e: Link UP Jul 11 00:29:53.605538 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali283e05f5d8e: link becomes ready Jul 11 00:29:53.605309 systemd-networkd[1045]: cali283e05f5d8e: Gained carrier Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.505 [INFO][4511] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0 calico-apiserver-55c6f7fb7- calico-apiserver 5e7bd041-bfeb-44c3-8199-39d9c2fb02b5 1097 0 2025-07-11 00:29:26 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:55c6f7fb7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-55c6f7fb7-bcrzs eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali283e05f5d8e [] [] }} ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.505 [INFO][4511] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.537 [INFO][4526] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" HandleID="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.537 [INFO][4526] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" HandleID="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c660), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-55c6f7fb7-bcrzs", "timestamp":"2025-07-11 00:29:53.537137349 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.537 [INFO][4526] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.537 [INFO][4526] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.537 [INFO][4526] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.553 [INFO][4526] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.565 [INFO][4526] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.578 [INFO][4526] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.581 [INFO][4526] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.583 [INFO][4526] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.583 [INFO][4526] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.585 [INFO][4526] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.589 [INFO][4526] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.597 [INFO][4526] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.597 [INFO][4526] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" host="localhost" Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.597 [INFO][4526] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:29:53.623813 env[1210]: 2025-07-11 00:29:53.598 [INFO][4526] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" HandleID="k8s-pod-network.70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.624560 env[1210]: 2025-07-11 00:29:53.600 [INFO][4511] cni-plugin/k8s.go 418: Populated endpoint ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5", ResourceVersion:"1097", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-55c6f7fb7-bcrzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali283e05f5d8e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:53.624560 env[1210]: 2025-07-11 00:29:53.600 [INFO][4511] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.624560 env[1210]: 2025-07-11 00:29:53.600 [INFO][4511] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali283e05f5d8e ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.624560 env[1210]: 2025-07-11 00:29:53.606 [INFO][4511] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.624560 env[1210]: 2025-07-11 00:29:53.608 [INFO][4511] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5", ResourceVersion:"1097", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a", Pod:"calico-apiserver-55c6f7fb7-bcrzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali283e05f5d8e", MAC:"1a:3f:3e:78:3b:a0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:29:53.624560 env[1210]: 2025-07-11 00:29:53.621 [INFO][4511] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a" Namespace="calico-apiserver" Pod="calico-apiserver-55c6f7fb7-bcrzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:29:53.641000 audit[4562]: NETFILTER_CFG table=filter:122 family=2 entries=41 op=nft_register_chain pid=4562 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:29:53.641000 audit[4562]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23096 a0=3 a1=ffffd848a4f0 a2=0 a3=ffffa4603fa8 items=0 ppid=3284 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.641000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:29:53.645262 env[1210]: time="2025-07-11T00:29:53.645178206Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:29:53.645262 env[1210]: time="2025-07-11T00:29:53.645227926Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:29:53.645563 env[1210]: time="2025-07-11T00:29:53.645238286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:29:53.645658 env[1210]: time="2025-07-11T00:29:53.645620405Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a pid=4570 runtime=io.containerd.runc.v2 Jul 11 00:29:53.658472 systemd[1]: Started cri-containerd-70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a.scope. Jul 11 00:29:53.666405 systemd[1]: run-netns-cni\x2d1ab0ec51\x2d3ca0\x2d0048\x2d1a87\x2dc170f4cea01d.mount: Deactivated successfully. Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.680000 audit: BPF prog-id=216 op=LOAD Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4570 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333134613834636131656638383763373832343064323036336264 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4570 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333134613834636131656638383763373832343064323036336264 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit: BPF prog-id=217 op=LOAD Jul 11 00:29:53.681000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4570 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333134613834636131656638383763373832343064323036336264 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit: BPF prog-id=218 op=LOAD Jul 11 00:29:53.681000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4570 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333134613834636131656638383763373832343064323036336264 Jul 11 00:29:53.681000 audit: BPF prog-id=218 op=UNLOAD Jul 11 00:29:53.681000 audit: BPF prog-id=217 op=UNLOAD Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.681000 audit: BPF prog-id=219 op=LOAD Jul 11 00:29:53.681000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4570 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333134613834636131656638383763373832343064323036336264 Jul 11 00:29:53.683492 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:29:53.700180 env[1210]: time="2025-07-11T00:29:53.700135451Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55c6f7fb7-bcrzs,Uid:5e7bd041-bfeb-44c3-8199-39d9c2fb02b5,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a\"" Jul 11 00:29:53.702822 env[1210]: time="2025-07-11T00:29:53.702787922Z" level=info msg="CreateContainer within sandbox \"70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:29:53.716888 env[1210]: time="2025-07-11T00:29:53.716838792Z" level=info msg="CreateContainer within sandbox \"70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"d5da4183211c5a36175d03a7aa7004d3bf8fe4b65959cb181550115117ab9202\"" Jul 11 00:29:53.717670 env[1210]: time="2025-07-11T00:29:53.717616629Z" level=info msg="StartContainer for \"d5da4183211c5a36175d03a7aa7004d3bf8fe4b65959cb181550115117ab9202\"" Jul 11 00:29:53.740373 systemd[1]: Started cri-containerd-d5da4183211c5a36175d03a7aa7004d3bf8fe4b65959cb181550115117ab9202.scope. Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.767000 audit: BPF prog-id=220 op=LOAD Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4570 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646134313833323131633561333631373564303361376161373030 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4570 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646134313833323131633561333631373564303361376161373030 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit: BPF prog-id=221 op=LOAD Jul 11 00:29:53.768000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4570 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646134313833323131633561333631373564303361376161373030 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit: BPF prog-id=222 op=LOAD Jul 11 00:29:53.768000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4570 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646134313833323131633561333631373564303361376161373030 Jul 11 00:29:53.768000 audit: BPF prog-id=222 op=UNLOAD Jul 11 00:29:53.768000 audit: BPF prog-id=221 op=UNLOAD Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:53.768000 audit: BPF prog-id=223 op=LOAD Jul 11 00:29:53.768000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4570 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646134313833323131633561333631373564303361376161373030 Jul 11 00:29:53.790688 env[1210]: time="2025-07-11T00:29:53.790627531Z" level=info msg="StartContainer for \"d5da4183211c5a36175d03a7aa7004d3bf8fe4b65959cb181550115117ab9202\" returns successfully" Jul 11 00:29:53.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.65:22-10.0.0.1:59154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:53.860616 systemd[1]: Started sshd@8-10.0.0.65:22-10.0.0.1:59154.service. Jul 11 00:29:53.907000 audit[4648]: USER_ACCT pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:53.908866 sshd[4648]: Accepted publickey for core from 10.0.0.1 port 59154 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:29:53.909000 audit[4648]: CRED_ACQ pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:53.909000 audit[4648]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff734ab60 a2=3 a3=1 items=0 ppid=1 pid=4648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:53.909000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:29:53.911213 sshd[4648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:29:53.914579 systemd-logind[1201]: New session 9 of user core. Jul 11 00:29:53.915454 systemd[1]: Started session-9.scope. Jul 11 00:29:53.918000 audit[4648]: USER_START pid=4648 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:53.919000 audit[4650]: CRED_ACQ pid=4650 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:54.107820 sshd[4648]: pam_unix(sshd:session): session closed for user core Jul 11 00:29:54.107000 audit[4648]: USER_END pid=4648 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:54.107000 audit[4648]: CRED_DISP pid=4648 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:54.110152 systemd[1]: sshd@8-10.0.0.65:22-10.0.0.1:59154.service: Deactivated successfully. Jul 11 00:29:54.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.65:22-10.0.0.1:59154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:54.110910 systemd[1]: session-9.scope: Deactivated successfully. Jul 11 00:29:54.111364 systemd-logind[1201]: Session 9 logged out. Waiting for processes to exit. Jul 11 00:29:54.112032 systemd-logind[1201]: Removed session 9. Jul 11 00:29:54.562777 kubelet[1948]: I0711 00:29:54.562671 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-55c6f7fb7-bcrzs" podStartSLOduration=28.562639727 podStartE2EDuration="28.562639727s" podCreationTimestamp="2025-07-11 00:29:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:29:54.561293932 +0000 UTC m=+42.365593399" watchObservedRunningTime="2025-07-11 00:29:54.562639727 +0000 UTC m=+42.366939194" Jul 11 00:29:54.581000 audit[4677]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=4677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:54.581000 audit[4677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc4297690 a2=0 a3=1 items=0 ppid=2100 pid=4677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:54.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:54.593000 audit[4677]: NETFILTER_CFG table=nat:124 family=2 entries=22 op=nft_register_rule pid=4677 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:29:54.593000 audit[4677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc4297690 a2=0 a3=1 items=0 ppid=2100 pid=4677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:54.593000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:29:54.608508 systemd-networkd[1045]: calic11448eaa4b: Gained IPv6LL Jul 11 00:29:54.664437 systemd[1]: run-containerd-runc-k8s.io-d5da4183211c5a36175d03a7aa7004d3bf8fe4b65959cb181550115117ab9202-runc.XRk3OM.mount: Deactivated successfully. Jul 11 00:29:54.921000 audit[4624]: AVC avc: denied { watch } for pid=4624 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_29_36.903759165/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c111,c492 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c111,c492 tclass=file permissive=0 Jul 11 00:29:54.921000 audit[4624]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001023bc0 a2=fc6 a3=0 items=0 ppid=4570 pid=4624 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c111,c492 key=(null) Jul 11 00:29:54.921000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:29:54.992598 systemd-networkd[1045]: cali283e05f5d8e: Gained IPv6LL Jul 11 00:29:55.449543 env[1210]: time="2025-07-11T00:29:55.449484906Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:55.454541 env[1210]: time="2025-07-11T00:29:55.454498930Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:55.456015 env[1210]: time="2025-07-11T00:29:55.455970565Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:55.457565 env[1210]: time="2025-07-11T00:29:55.457533559Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:55.458038 env[1210]: time="2025-07-11T00:29:55.457999358Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 11 00:29:55.461407 env[1210]: time="2025-07-11T00:29:55.461213947Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 11 00:29:55.481950 env[1210]: time="2025-07-11T00:29:55.481887878Z" level=info msg="CreateContainer within sandbox \"b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 11 00:29:55.527109 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2672436440.mount: Deactivated successfully. Jul 11 00:29:55.530426 env[1210]: time="2025-07-11T00:29:55.530376594Z" level=info msg="CreateContainer within sandbox \"b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"8e98cc34d65a5f786696857548fd084f8146b88e41e3086e7df192c9101f3da8\"" Jul 11 00:29:55.530925 env[1210]: time="2025-07-11T00:29:55.530876553Z" level=info msg="StartContainer for \"8e98cc34d65a5f786696857548fd084f8146b88e41e3086e7df192c9101f3da8\"" Jul 11 00:29:55.544629 systemd[1]: Started cri-containerd-8e98cc34d65a5f786696857548fd084f8146b88e41e3086e7df192c9101f3da8.scope. Jul 11 00:29:55.557357 kubelet[1948]: I0711 00:29:55.555908 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit: BPF prog-id=224 op=LOAD Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3978 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:55.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393863633334643635613566373836363936383537353438666430 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3978 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:55.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393863633334643635613566373836363936383537353438666430 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit: BPF prog-id=225 op=LOAD Jul 11 00:29:55.565000 audit[4704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3978 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:55.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393863633334643635613566373836363936383537353438666430 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.565000 audit: BPF prog-id=226 op=LOAD Jul 11 00:29:55.565000 audit[4704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3978 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:55.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393863633334643635613566373836363936383537353438666430 Jul 11 00:29:55.566000 audit: BPF prog-id=226 op=UNLOAD Jul 11 00:29:55.566000 audit: BPF prog-id=225 op=UNLOAD Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:55.566000 audit: BPF prog-id=227 op=LOAD Jul 11 00:29:55.566000 audit[4704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3978 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:55.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393863633334643635613566373836363936383537353438666430 Jul 11 00:29:55.589003 env[1210]: time="2025-07-11T00:29:55.588946838Z" level=info msg="StartContainer for \"8e98cc34d65a5f786696857548fd084f8146b88e41e3086e7df192c9101f3da8\" returns successfully" Jul 11 00:29:56.302304 env[1210]: time="2025-07-11T00:29:56.302255664Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:56.303674 env[1210]: time="2025-07-11T00:29:56.303640619Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:56.305086 env[1210]: time="2025-07-11T00:29:56.305057255Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:56.306302 env[1210]: time="2025-07-11T00:29:56.306261491Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:56.306925 env[1210]: time="2025-07-11T00:29:56.306895088Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 11 00:29:56.309244 env[1210]: time="2025-07-11T00:29:56.309208041Z" level=info msg="CreateContainer within sandbox \"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 11 00:29:56.325669 env[1210]: time="2025-07-11T00:29:56.325606227Z" level=info msg="CreateContainer within sandbox \"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"72a413d1acb0ff04be7f09ce5603e2b86afafdfec5d2f8919e47419158121bd6\"" Jul 11 00:29:56.326371 env[1210]: time="2025-07-11T00:29:56.326339185Z" level=info msg="StartContainer for \"72a413d1acb0ff04be7f09ce5603e2b86afafdfec5d2f8919e47419158121bd6\"" Jul 11 00:29:56.350991 systemd[1]: Started cri-containerd-72a413d1acb0ff04be7f09ce5603e2b86afafdfec5d2f8919e47419158121bd6.scope. Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4413 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:56.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613431336431616362306666303462653766303963653536303365 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.371000 audit: BPF prog-id=228 op=LOAD Jul 11 00:29:56.371000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4413 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:56.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613431336431616362306666303462653766303963653536303365 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit: BPF prog-id=229 op=LOAD Jul 11 00:29:56.372000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4413 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:56.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613431336431616362306666303462653766303963653536303365 Jul 11 00:29:56.372000 audit: BPF prog-id=229 op=UNLOAD Jul 11 00:29:56.372000 audit: BPF prog-id=228 op=UNLOAD Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:56.372000 audit: BPF prog-id=230 op=LOAD Jul 11 00:29:56.372000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4413 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:56.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613431336431616362306666303462653766303963653536303365 Jul 11 00:29:56.393898 env[1210]: time="2025-07-11T00:29:56.393847803Z" level=info msg="StartContainer for \"72a413d1acb0ff04be7f09ce5603e2b86afafdfec5d2f8919e47419158121bd6\" returns successfully" Jul 11 00:29:56.396763 env[1210]: time="2025-07-11T00:29:56.396724994Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 11 00:29:56.628070 kubelet[1948]: I0711 00:29:56.627767 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-85cc845489-mxllf" podStartSLOduration=20.985677765 podStartE2EDuration="26.627750436s" podCreationTimestamp="2025-07-11 00:29:30 +0000 UTC" firstStartedPulling="2025-07-11 00:29:49.817038443 +0000 UTC m=+37.621337910" lastFinishedPulling="2025-07-11 00:29:55.459111114 +0000 UTC m=+43.263410581" observedRunningTime="2025-07-11 00:29:56.573732653 +0000 UTC m=+44.378032120" watchObservedRunningTime="2025-07-11 00:29:56.627750436 +0000 UTC m=+44.432049863" Jul 11 00:29:56.664732 systemd[1]: run-containerd-runc-k8s.io-72a413d1acb0ff04be7f09ce5603e2b86afafdfec5d2f8919e47419158121bd6-runc.9N4LRr.mount: Deactivated successfully. Jul 11 00:29:57.486975 env[1210]: time="2025-07-11T00:29:57.486925895Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:57.487989 env[1210]: time="2025-07-11T00:29:57.487958772Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:57.490420 env[1210]: time="2025-07-11T00:29:57.490322605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:57.491796 env[1210]: time="2025-07-11T00:29:57.491751560Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:29:57.492240 env[1210]: time="2025-07-11T00:29:57.492201879Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 11 00:29:57.495963 env[1210]: time="2025-07-11T00:29:57.495920867Z" level=info msg="CreateContainer within sandbox \"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 11 00:29:57.511518 env[1210]: time="2025-07-11T00:29:57.511477657Z" level=info msg="CreateContainer within sandbox \"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"84f072fe5408c6b9e4a872056db85cb82514363af12f4dd0ef67e3a91d58119b\"" Jul 11 00:29:57.512017 env[1210]: time="2025-07-11T00:29:57.511971295Z" level=info msg="StartContainer for \"84f072fe5408c6b9e4a872056db85cb82514363af12f4dd0ef67e3a91d58119b\"" Jul 11 00:29:57.537502 systemd[1]: Started cri-containerd-84f072fe5408c6b9e4a872056db85cb82514363af12f4dd0ef67e3a91d58119b.scope. Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4413 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:57.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663037326665353430386336623965346138373230353664623835 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit: BPF prog-id=231 op=LOAD Jul 11 00:29:57.560000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4413 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:57.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663037326665353430386336623965346138373230353664623835 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.560000 audit: BPF prog-id=232 op=LOAD Jul 11 00:29:57.560000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4413 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:57.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663037326665353430386336623965346138373230353664623835 Jul 11 00:29:57.561000 audit: BPF prog-id=232 op=UNLOAD Jul 11 00:29:57.561000 audit: BPF prog-id=231 op=UNLOAD Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:29:57.561000 audit: BPF prog-id=233 op=LOAD Jul 11 00:29:57.561000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4413 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:57.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663037326665353430386336623965346138373230353664623835 Jul 11 00:29:57.579498 env[1210]: time="2025-07-11T00:29:57.579441759Z" level=info msg="StartContainer for \"84f072fe5408c6b9e4a872056db85cb82514363af12f4dd0ef67e3a91d58119b\" returns successfully" Jul 11 00:29:58.443935 kubelet[1948]: I0711 00:29:58.443886 1948 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 11 00:29:58.444943 kubelet[1948]: I0711 00:29:58.444904 1948 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 11 00:29:58.587029 kubelet[1948]: I0711 00:29:58.586787 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-vg4d5" podStartSLOduration=23.86384643 podStartE2EDuration="28.586766695s" podCreationTimestamp="2025-07-11 00:29:30 +0000 UTC" firstStartedPulling="2025-07-11 00:29:52.77033793 +0000 UTC m=+40.574637397" lastFinishedPulling="2025-07-11 00:29:57.493258195 +0000 UTC m=+45.297557662" observedRunningTime="2025-07-11 00:29:58.586240657 +0000 UTC m=+46.390540124" watchObservedRunningTime="2025-07-11 00:29:58.586766695 +0000 UTC m=+46.391066162" Jul 11 00:29:59.113596 systemd[1]: Started sshd@9-10.0.0.65:22-10.0.0.1:59162.service. Jul 11 00:29:59.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.65:22-10.0.0.1:59162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.118429 kernel: kauditd_printk_skb: 402 callbacks suppressed Jul 11 00:29:59.118506 kernel: audit: type=1130 audit(1752193799.112:1459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.65:22-10.0.0.1:59162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.161000 audit[4838]: USER_ACCT pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.163508 sshd[4838]: Accepted publickey for core from 10.0.0.1 port 59162 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:29:59.165657 kernel: audit: type=1101 audit(1752193799.161:1460): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.165736 kernel: audit: type=1103 audit(1752193799.163:1461): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.163000 audit[4838]: CRED_ACQ pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.165636 sshd[4838]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:29:59.169212 kernel: audit: type=1006 audit(1752193799.163:1462): pid=4838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 11 00:29:59.169268 kernel: audit: type=1300 audit(1752193799.163:1462): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6b67530 a2=3 a3=1 items=0 ppid=1 pid=4838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:59.163000 audit[4838]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6b67530 a2=3 a3=1 items=0 ppid=1 pid=4838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:59.171647 kernel: audit: type=1327 audit(1752193799.163:1462): proctitle=737368643A20636F7265205B707269765D Jul 11 00:29:59.163000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:29:59.174144 systemd-logind[1201]: New session 10 of user core. Jul 11 00:29:59.174670 systemd[1]: Started session-10.scope. Jul 11 00:29:59.177000 audit[4838]: USER_START pid=4838 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.177000 audit[4840]: CRED_ACQ pid=4840 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.183737 kernel: audit: type=1105 audit(1752193799.177:1463): pid=4838 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.183794 kernel: audit: type=1103 audit(1752193799.177:1464): pid=4840 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.416378 sshd[4838]: pam_unix(sshd:session): session closed for user core Jul 11 00:29:59.416000 audit[4838]: USER_END pid=4838 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.419828 systemd[1]: Started sshd@10-10.0.0.65:22-10.0.0.1:59170.service. Jul 11 00:29:59.416000 audit[4838]: CRED_DISP pid=4838 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.420755 systemd[1]: sshd@9-10.0.0.65:22-10.0.0.1:59162.service: Deactivated successfully. Jul 11 00:29:59.421838 systemd[1]: session-10.scope: Deactivated successfully. Jul 11 00:29:59.423507 kernel: audit: type=1106 audit(1752193799.416:1465): pid=4838 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.423586 kernel: audit: type=1104 audit(1752193799.416:1466): pid=4838 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.65:22-10.0.0.1:59170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.65:22-10.0.0.1:59162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.424390 systemd-logind[1201]: Session 10 logged out. Waiting for processes to exit. Jul 11 00:29:59.429273 systemd-logind[1201]: Removed session 10. Jul 11 00:29:59.454000 audit[4851]: USER_ACCT pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.456051 sshd[4851]: Accepted publickey for core from 10.0.0.1 port 59170 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:29:59.455000 audit[4851]: CRED_ACQ pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.455000 audit[4851]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdef2c2e0 a2=3 a3=1 items=0 ppid=1 pid=4851 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:59.455000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:29:59.457796 sshd[4851]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:29:59.462059 systemd-logind[1201]: New session 11 of user core. Jul 11 00:29:59.462147 systemd[1]: Started session-11.scope. Jul 11 00:29:59.464000 audit[4851]: USER_START pid=4851 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.465000 audit[4854]: CRED_ACQ pid=4854 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.620598 sshd[4851]: pam_unix(sshd:session): session closed for user core Jul 11 00:29:59.622000 audit[4851]: USER_END pid=4851 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.622000 audit[4851]: CRED_DISP pid=4851 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.624535 systemd[1]: Started sshd@11-10.0.0.65:22-10.0.0.1:59182.service. Jul 11 00:29:59.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.65:22-10.0.0.1:59182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.627321 systemd[1]: sshd@10-10.0.0.65:22-10.0.0.1:59170.service: Deactivated successfully. Jul 11 00:29:59.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.65:22-10.0.0.1:59170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.628055 systemd[1]: session-11.scope: Deactivated successfully. Jul 11 00:29:59.630242 systemd-logind[1201]: Session 11 logged out. Waiting for processes to exit. Jul 11 00:29:59.631792 systemd-logind[1201]: Removed session 11. Jul 11 00:29:59.662000 audit[4862]: USER_ACCT pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.663728 sshd[4862]: Accepted publickey for core from 10.0.0.1 port 59182 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:29:59.663000 audit[4862]: CRED_ACQ pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.663000 audit[4862]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffededb3f0 a2=3 a3=1 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:29:59.663000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:29:59.665412 sshd[4862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:29:59.669463 systemd-logind[1201]: New session 12 of user core. Jul 11 00:29:59.669869 systemd[1]: Started session-12.scope. Jul 11 00:29:59.676000 audit[4862]: USER_START pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.676000 audit[4865]: CRED_ACQ pid=4865 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.821194 sshd[4862]: pam_unix(sshd:session): session closed for user core Jul 11 00:29:59.820000 audit[4862]: USER_END pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.820000 audit[4862]: CRED_DISP pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:29:59.824462 systemd[1]: sshd@11-10.0.0.65:22-10.0.0.1:59182.service: Deactivated successfully. Jul 11 00:29:59.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.65:22-10.0.0.1:59182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:29:59.825231 systemd[1]: session-12.scope: Deactivated successfully. Jul 11 00:29:59.825925 systemd-logind[1201]: Session 12 logged out. Waiting for processes to exit. Jul 11 00:29:59.826884 systemd-logind[1201]: Removed session 12. Jul 11 00:30:04.825650 systemd[1]: Started sshd@12-10.0.0.65:22-10.0.0.1:33570.service. Jul 11 00:30:04.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.65:22-10.0.0.1:33570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:04.826449 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 11 00:30:04.826694 kernel: audit: type=1130 audit(1752193804.824:1486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.65:22-10.0.0.1:33570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:04.865000 audit[4914]: USER_ACCT pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.867386 sshd[4914]: Accepted publickey for core from 10.0.0.1 port 33570 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:04.870433 kernel: audit: type=1101 audit(1752193804.865:1487): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.869000 audit[4914]: CRED_ACQ pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.871236 sshd[4914]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:04.874559 kernel: audit: type=1103 audit(1752193804.869:1488): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.874729 kernel: audit: type=1006 audit(1752193804.869:1489): pid=4914 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 11 00:30:04.874766 kernel: audit: type=1300 audit(1752193804.869:1489): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff127380 a2=3 a3=1 items=0 ppid=1 pid=4914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:04.869000 audit[4914]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff127380 a2=3 a3=1 items=0 ppid=1 pid=4914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:04.877212 kernel: audit: type=1327 audit(1752193804.869:1489): proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:04.869000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:04.879512 systemd-logind[1201]: New session 13 of user core. Jul 11 00:30:04.879844 systemd[1]: Started session-13.scope. Jul 11 00:30:04.883000 audit[4914]: USER_START pid=4914 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.883000 audit[4916]: CRED_ACQ pid=4916 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.889619 kernel: audit: type=1105 audit(1752193804.883:1490): pid=4914 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:04.889704 kernel: audit: type=1103 audit(1752193804.883:1491): pid=4916 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:05.037147 sshd[4914]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:05.036000 audit[4914]: USER_END pid=4914 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:05.036000 audit[4914]: CRED_DISP pid=4914 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:05.042903 kernel: audit: type=1106 audit(1752193805.036:1492): pid=4914 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:05.042976 kernel: audit: type=1104 audit(1752193805.036:1493): pid=4914 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:05.044763 systemd[1]: sshd@12-10.0.0.65:22-10.0.0.1:33570.service: Deactivated successfully. Jul 11 00:30:05.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.65:22-10.0.0.1:33570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:05.045575 systemd[1]: session-13.scope: Deactivated successfully. Jul 11 00:30:05.046431 systemd-logind[1201]: Session 13 logged out. Waiting for processes to exit. Jul 11 00:30:05.047336 systemd-logind[1201]: Removed session 13. Jul 11 00:30:09.394000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.394000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.394000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=40089431d0 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:30:09.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:30:09.394000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=40075051c0 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:30:09.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:30:09.394000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.394000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=4009789320 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:30:09.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:30:09.394000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7312 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.394000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=40097893e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:30:09.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:30:09.425000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.425000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=40089435f0 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:30:09.425000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:30:09.434000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.434000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=4011878b80 a2=fc6 a3=0 items=0 ppid=1657 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c55,c950 key=(null) Jul 11 00:30:09.434000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:30:09.707000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.707000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea4b20 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:30:09.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:30:09.712000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:09.712000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002e56270 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:30:09.712000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:30:10.041897 systemd[1]: Started sshd@13-10.0.0.65:22-10.0.0.1:33584.service. Jul 11 00:30:10.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.65:22-10.0.0.1:33584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:10.042675 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 11 00:30:10.042726 kernel: audit: type=1130 audit(1752193810.040:1503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.65:22-10.0.0.1:33584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:10.078000 audit[4927]: USER_ACCT pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.079768 sshd[4927]: Accepted publickey for core from 10.0.0.1 port 33584 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:10.081591 sshd[4927]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:10.079000 audit[4927]: CRED_ACQ pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.084273 kernel: audit: type=1101 audit(1752193810.078:1504): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.084423 kernel: audit: type=1103 audit(1752193810.079:1505): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.084461 kernel: audit: type=1006 audit(1752193810.079:1506): pid=4927 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 11 00:30:10.079000 audit[4927]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6774730 a2=3 a3=1 items=0 ppid=1 pid=4927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:10.086202 systemd[1]: Started session-14.scope. Jul 11 00:30:10.086517 systemd-logind[1201]: New session 14 of user core. Jul 11 00:30:10.088050 kernel: audit: type=1300 audit(1752193810.079:1506): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6774730 a2=3 a3=1 items=0 ppid=1 pid=4927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:10.088108 kernel: audit: type=1327 audit(1752193810.079:1506): proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:10.079000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:10.090000 audit[4927]: USER_START pid=4927 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.091000 audit[4929]: CRED_ACQ pid=4929 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.096415 kernel: audit: type=1105 audit(1752193810.090:1507): pid=4927 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.096503 kernel: audit: type=1103 audit(1752193810.091:1508): pid=4929 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.205382 sshd[4927]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:10.205000 audit[4927]: USER_END pid=4927 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.205000 audit[4927]: CRED_DISP pid=4927 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.209387 systemd[1]: sshd@13-10.0.0.65:22-10.0.0.1:33584.service: Deactivated successfully. Jul 11 00:30:10.210134 systemd[1]: session-14.scope: Deactivated successfully. Jul 11 00:30:10.210454 systemd-logind[1201]: Session 14 logged out. Waiting for processes to exit. Jul 11 00:30:10.211163 systemd-logind[1201]: Removed session 14. Jul 11 00:30:10.211532 kernel: audit: type=1106 audit(1752193810.205:1509): pid=4927 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.211593 kernel: audit: type=1104 audit(1752193810.205:1510): pid=4927 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:10.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.65:22-10.0.0.1:33584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:10.897152 kubelet[1948]: I0711 00:30:10.897099 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:30:10.947000 audit[4940]: NETFILTER_CFG table=filter:125 family=2 entries=11 op=nft_register_rule pid=4940 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:10.947000 audit[4940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffaf59180 a2=0 a3=1 items=0 ppid=2100 pid=4940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:10.947000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:10.954000 audit[4940]: NETFILTER_CFG table=nat:126 family=2 entries=29 op=nft_register_chain pid=4940 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:10.954000 audit[4940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffffaf59180 a2=0 a3=1 items=0 ppid=2100 pid=4940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:10.954000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:11.164804 systemd[1]: run-containerd-runc-k8s.io-94ffdfe77dbd2d6e7d40a17e031ae92269735dec247e268ab7dccef8dc8a2881-runc.7Jc0hV.mount: Deactivated successfully. Jul 11 00:30:11.245000 audit[4964]: NETFILTER_CFG table=filter:127 family=2 entries=9 op=nft_register_rule pid=4964 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:11.245000 audit[4964]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffeffd7e90 a2=0 a3=1 items=0 ppid=2100 pid=4964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:11.245000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:11.259000 audit[4964]: NETFILTER_CFG table=nat:128 family=2 entries=31 op=nft_register_chain pid=4964 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:11.259000 audit[4964]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffeffd7e90 a2=0 a3=1 items=0 ppid=2100 pid=4964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:11.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:11.945000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:11.945000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002bdc620 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:30:11.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:30:11.946000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:11.946000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002f9e500 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:30:11.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:30:11.946000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:11.946000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002f9e520 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:30:11.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:30:11.946000 audit[1818]: AVC avc: denied { watch } for pid=1818 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:30:11.946000 audit[1818]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002bdc640 a2=fc6 a3=0 items=0 ppid=1665 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c285,c951 key=(null) Jul 11 00:30:11.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:30:12.360985 env[1210]: time="2025-07-11T00:30:12.360933682Z" level=info msg="StopPodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\"" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.403 [WARNING][4976] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92c2ade4-59cc-4e62-b054-56068cb51ff3", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac", Pod:"coredns-7c65d6cfc9-cqxt6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali29af6584714", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.403 [INFO][4976] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.403 [INFO][4976] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" iface="eth0" netns="" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.403 [INFO][4976] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.404 [INFO][4976] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.426 [INFO][4985] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.426 [INFO][4985] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.426 [INFO][4985] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.434 [WARNING][4985] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.434 [INFO][4985] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.436 [INFO][4985] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.439727 env[1210]: 2025-07-11 00:30:12.437 [INFO][4976] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.439727 env[1210]: time="2025-07-11T00:30:12.439711446Z" level=info msg="TearDown network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" successfully" Jul 11 00:30:12.440190 env[1210]: time="2025-07-11T00:30:12.439738486Z" level=info msg="StopPodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" returns successfully" Jul 11 00:30:12.440262 env[1210]: time="2025-07-11T00:30:12.440231285Z" level=info msg="RemovePodSandbox for \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\"" Jul 11 00:30:12.440315 env[1210]: time="2025-07-11T00:30:12.440266565Z" level=info msg="Forcibly stopping sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\"" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.472 [WARNING][5003] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92c2ade4-59cc-4e62-b054-56068cb51ff3", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e57e203936f3ef9a3fbb15ff1a236b53acf6ec9964f4a173e6675a20588b5bac", Pod:"coredns-7c65d6cfc9-cqxt6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali29af6584714", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.473 [INFO][5003] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.473 [INFO][5003] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" iface="eth0" netns="" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.473 [INFO][5003] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.473 [INFO][5003] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.489 [INFO][5011] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.490 [INFO][5011] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.490 [INFO][5011] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.499 [WARNING][5011] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.499 [INFO][5011] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" HandleID="k8s-pod-network.086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Workload="localhost-k8s-coredns--7c65d6cfc9--cqxt6-eth0" Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.500 [INFO][5011] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.504084 env[1210]: 2025-07-11 00:30:12.502 [INFO][5003] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70" Jul 11 00:30:12.504548 env[1210]: time="2025-07-11T00:30:12.504109206Z" level=info msg="TearDown network for sandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" successfully" Jul 11 00:30:12.511701 env[1210]: time="2025-07-11T00:30:12.511664988Z" level=info msg="RemovePodSandbox \"086c3ffeb773f475a135a78ce3f948f1a5179712c3d6e9b6482467a9f409bf70\" returns successfully" Jul 11 00:30:12.512220 env[1210]: time="2025-07-11T00:30:12.512185906Z" level=info msg="StopPodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\"" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.543 [WARNING][5029] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0", GenerateName:"calico-kube-controllers-85cc845489-", Namespace:"calico-system", SelfLink:"", UID:"c63522c7-9a2f-4d98-8548-32650e05e81b", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85cc845489", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33", Pod:"calico-kube-controllers-85cc845489-mxllf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali235e2eff655", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.543 [INFO][5029] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.543 [INFO][5029] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" iface="eth0" netns="" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.543 [INFO][5029] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.543 [INFO][5029] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.565 [INFO][5038] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.566 [INFO][5038] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.567 [INFO][5038] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.581 [WARNING][5038] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.582 [INFO][5038] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.584 [INFO][5038] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.588601 env[1210]: 2025-07-11 00:30:12.587 [INFO][5029] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.589069 env[1210]: time="2025-07-11T00:30:12.588654396Z" level=info msg="TearDown network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" successfully" Jul 11 00:30:12.589069 env[1210]: time="2025-07-11T00:30:12.588685356Z" level=info msg="StopPodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" returns successfully" Jul 11 00:30:12.589214 env[1210]: time="2025-07-11T00:30:12.589181595Z" level=info msg="RemovePodSandbox for \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\"" Jul 11 00:30:12.589254 env[1210]: time="2025-07-11T00:30:12.589215435Z" level=info msg="Forcibly stopping sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\"" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.626 [WARNING][5057] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0", GenerateName:"calico-kube-controllers-85cc845489-", Namespace:"calico-system", SelfLink:"", UID:"c63522c7-9a2f-4d98-8548-32650e05e81b", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85cc845489", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b8f5bf5be8f457ba13bd7d2453ebc6da3011d7ca390d8d4eea1e48cf93f6db33", Pod:"calico-kube-controllers-85cc845489-mxllf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali235e2eff655", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.627 [INFO][5057] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.627 [INFO][5057] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" iface="eth0" netns="" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.627 [INFO][5057] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.627 [INFO][5057] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.644 [INFO][5066] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.645 [INFO][5066] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.645 [INFO][5066] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.653 [WARNING][5066] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.653 [INFO][5066] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" HandleID="k8s-pod-network.d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Workload="localhost-k8s-calico--kube--controllers--85cc845489--mxllf-eth0" Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.655 [INFO][5066] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.659990 env[1210]: 2025-07-11 00:30:12.656 [INFO][5057] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a" Jul 11 00:30:12.660528 env[1210]: time="2025-07-11T00:30:12.660487178Z" level=info msg="TearDown network for sandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" successfully" Jul 11 00:30:12.663335 env[1210]: time="2025-07-11T00:30:12.663297211Z" level=info msg="RemovePodSandbox \"d55907a474a1e139b709ec0825976d38f33b51b0774fa1159d3b293d348cb55a\" returns successfully" Jul 11 00:30:12.663835 env[1210]: time="2025-07-11T00:30:12.663812810Z" level=info msg="StopPodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\"" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.697 [WARNING][5084] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"5cb126e3-1fdb-4fea-ba79-3db92e5a1116", ResourceVersion:"1235", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3", Pod:"goldmane-58fd7646b9-ltzwj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calieb4559900dc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.697 [INFO][5084] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.697 [INFO][5084] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" iface="eth0" netns="" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.697 [INFO][5084] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.697 [INFO][5084] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.714 [INFO][5093] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.714 [INFO][5093] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.714 [INFO][5093] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.724 [WARNING][5093] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.724 [INFO][5093] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.725 [INFO][5093] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.728713 env[1210]: 2025-07-11 00:30:12.727 [INFO][5084] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.729191 env[1210]: time="2025-07-11T00:30:12.728718129Z" level=info msg="TearDown network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" successfully" Jul 11 00:30:12.729191 env[1210]: time="2025-07-11T00:30:12.728773808Z" level=info msg="StopPodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" returns successfully" Jul 11 00:30:12.729430 env[1210]: time="2025-07-11T00:30:12.729387847Z" level=info msg="RemovePodSandbox for \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\"" Jul 11 00:30:12.729650 env[1210]: time="2025-07-11T00:30:12.729605606Z" level=info msg="Forcibly stopping sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\"" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.762 [WARNING][5111] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"5cb126e3-1fdb-4fea-ba79-3db92e5a1116", ResourceVersion:"1235", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eaf6d32d9e0a9db6ffbc564e79e06c22e756c62f611043766000eaae7df4d8a3", Pod:"goldmane-58fd7646b9-ltzwj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calieb4559900dc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.762 [INFO][5111] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.762 [INFO][5111] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" iface="eth0" netns="" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.762 [INFO][5111] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.762 [INFO][5111] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.779 [INFO][5121] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.779 [INFO][5121] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.779 [INFO][5121] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.787 [WARNING][5121] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.787 [INFO][5121] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" HandleID="k8s-pod-network.bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Workload="localhost-k8s-goldmane--58fd7646b9--ltzwj-eth0" Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.788 [INFO][5121] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.791847 env[1210]: 2025-07-11 00:30:12.790 [INFO][5111] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07" Jul 11 00:30:12.792344 env[1210]: time="2025-07-11T00:30:12.792311091Z" level=info msg="TearDown network for sandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" successfully" Jul 11 00:30:12.795499 env[1210]: time="2025-07-11T00:30:12.795462323Z" level=info msg="RemovePodSandbox \"bf6246bf64b37a83815d08824697a2ceae1c4dfd2dde784d5a8a0367d5685b07\" returns successfully" Jul 11 00:30:12.796252 env[1210]: time="2025-07-11T00:30:12.796221881Z" level=info msg="StopPodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\"" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.826 [WARNING][5139] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vg4d5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a32caaa4-7464-4227-89a9-b3ea02143a93", ResourceVersion:"1162", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5", Pod:"csi-node-driver-vg4d5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic11448eaa4b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.827 [INFO][5139] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.827 [INFO][5139] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" iface="eth0" netns="" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.827 [INFO][5139] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.827 [INFO][5139] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.845 [INFO][5148] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.845 [INFO][5148] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.845 [INFO][5148] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.853 [WARNING][5148] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.853 [INFO][5148] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.855 [INFO][5148] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.858868 env[1210]: 2025-07-11 00:30:12.857 [INFO][5139] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.859277 env[1210]: time="2025-07-11T00:30:12.858902605Z" level=info msg="TearDown network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" successfully" Jul 11 00:30:12.859277 env[1210]: time="2025-07-11T00:30:12.858936845Z" level=info msg="StopPodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" returns successfully" Jul 11 00:30:12.859414 env[1210]: time="2025-07-11T00:30:12.859367924Z" level=info msg="RemovePodSandbox for \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\"" Jul 11 00:30:12.859448 env[1210]: time="2025-07-11T00:30:12.859412964Z" level=info msg="Forcibly stopping sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\"" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.891 [WARNING][5166] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vg4d5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a32caaa4-7464-4227-89a9-b3ea02143a93", ResourceVersion:"1162", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"55aa35fafe946ab737737c108d6b6df918de9cac1267db8476f45821502bfdd5", Pod:"csi-node-driver-vg4d5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic11448eaa4b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.892 [INFO][5166] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.892 [INFO][5166] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" iface="eth0" netns="" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.892 [INFO][5166] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.892 [INFO][5166] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.909 [INFO][5174] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.909 [INFO][5174] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.909 [INFO][5174] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.918 [WARNING][5174] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.918 [INFO][5174] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" HandleID="k8s-pod-network.1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Workload="localhost-k8s-csi--node--driver--vg4d5-eth0" Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.919 [INFO][5174] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.925619 env[1210]: 2025-07-11 00:30:12.921 [INFO][5166] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c" Jul 11 00:30:12.925619 env[1210]: time="2025-07-11T00:30:12.923281685Z" level=info msg="TearDown network for sandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" successfully" Jul 11 00:30:12.926524 env[1210]: time="2025-07-11T00:30:12.926482477Z" level=info msg="RemovePodSandbox \"1785383cd06203ffde5ca33ee733c702f5207726af7e77dc2970d5b594803c0c\" returns successfully" Jul 11 00:30:12.926981 env[1210]: time="2025-07-11T00:30:12.926953356Z" level=info msg="StopPodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\"" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.961 [WARNING][5192] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"acd0bd31-6a75-4031-b009-73135f28132c", ResourceVersion:"1063", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269", Pod:"calico-apiserver-55c6f7fb7-9rhjl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0fb9dc4a03d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.961 [INFO][5192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.961 [INFO][5192] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" iface="eth0" netns="" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.962 [INFO][5192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.962 [INFO][5192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.978 [INFO][5201] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.978 [INFO][5201] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.978 [INFO][5201] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.986 [WARNING][5201] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.986 [INFO][5201] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.987 [INFO][5201] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:12.991297 env[1210]: 2025-07-11 00:30:12.989 [INFO][5192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:12.991762 env[1210]: time="2025-07-11T00:30:12.991322636Z" level=info msg="TearDown network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" successfully" Jul 11 00:30:12.991762 env[1210]: time="2025-07-11T00:30:12.991355716Z" level=info msg="StopPodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" returns successfully" Jul 11 00:30:12.992051 env[1210]: time="2025-07-11T00:30:12.992020595Z" level=info msg="RemovePodSandbox for \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\"" Jul 11 00:30:12.992201 env[1210]: time="2025-07-11T00:30:12.992158834Z" level=info msg="Forcibly stopping sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\"" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.024 [WARNING][5219] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"acd0bd31-6a75-4031-b009-73135f28132c", ResourceVersion:"1063", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9c0d162ffa2a8cdbeb4b3b81e03162de4806e475fb1adbcd745d1a7f910e7269", Pod:"calico-apiserver-55c6f7fb7-9rhjl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0fb9dc4a03d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.024 [INFO][5219] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.024 [INFO][5219] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" iface="eth0" netns="" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.025 [INFO][5219] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.025 [INFO][5219] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.041 [INFO][5228] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.042 [INFO][5228] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.042 [INFO][5228] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.050 [WARNING][5228] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.050 [INFO][5228] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" HandleID="k8s-pod-network.b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--9rhjl-eth0" Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.051 [INFO][5228] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.054824 env[1210]: 2025-07-11 00:30:13.053 [INFO][5219] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472" Jul 11 00:30:13.055352 env[1210]: time="2025-07-11T00:30:13.055311679Z" level=info msg="TearDown network for sandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" successfully" Jul 11 00:30:13.058153 env[1210]: time="2025-07-11T00:30:13.058117712Z" level=info msg="RemovePodSandbox \"b2da47f0aa29e0312de969089039bb17ebd6a20219d2093c5a2536bbe521a472\" returns successfully" Jul 11 00:30:13.058883 env[1210]: time="2025-07-11T00:30:13.058840830Z" level=info msg="StopPodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\"" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.092 [WARNING][5245] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5", ResourceVersion:"1225", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a", Pod:"calico-apiserver-55c6f7fb7-bcrzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali283e05f5d8e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.092 [INFO][5245] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.092 [INFO][5245] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" iface="eth0" netns="" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.092 [INFO][5245] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.092 [INFO][5245] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.113 [INFO][5254] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.113 [INFO][5254] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.113 [INFO][5254] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.122 [WARNING][5254] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.122 [INFO][5254] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.123 [INFO][5254] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.127288 env[1210]: 2025-07-11 00:30:13.125 [INFO][5245] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.127721 env[1210]: time="2025-07-11T00:30:13.127312382Z" level=info msg="TearDown network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" successfully" Jul 11 00:30:13.127721 env[1210]: time="2025-07-11T00:30:13.127344062Z" level=info msg="StopPodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" returns successfully" Jul 11 00:30:13.128777 env[1210]: time="2025-07-11T00:30:13.128746778Z" level=info msg="RemovePodSandbox for \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\"" Jul 11 00:30:13.128836 env[1210]: time="2025-07-11T00:30:13.128785818Z" level=info msg="Forcibly stopping sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\"" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.162 [WARNING][5272] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0", GenerateName:"calico-apiserver-55c6f7fb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e7bd041-bfeb-44c3-8199-39d9c2fb02b5", ResourceVersion:"1225", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55c6f7fb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"70314a84ca1ef887c78240d2063bd95332c528af3629048135741c4d252b9d9a", Pod:"calico-apiserver-55c6f7fb7-bcrzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali283e05f5d8e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.162 [INFO][5272] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.162 [INFO][5272] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" iface="eth0" netns="" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.162 [INFO][5272] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.162 [INFO][5272] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.199 [INFO][5281] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.199 [INFO][5281] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.199 [INFO][5281] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.208 [WARNING][5281] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.208 [INFO][5281] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" HandleID="k8s-pod-network.ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Workload="localhost-k8s-calico--apiserver--55c6f7fb7--bcrzs-eth0" Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.209 [INFO][5281] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.212991 env[1210]: 2025-07-11 00:30:13.211 [INFO][5272] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b" Jul 11 00:30:13.213570 env[1210]: time="2025-07-11T00:30:13.213531170Z" level=info msg="TearDown network for sandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" successfully" Jul 11 00:30:13.216899 env[1210]: time="2025-07-11T00:30:13.216864602Z" level=info msg="RemovePodSandbox \"ef41a120ef274e09ed4cecf7145854bb5fef566d77b602f24972cfc48240064b\" returns successfully" Jul 11 00:30:13.217464 env[1210]: time="2025-07-11T00:30:13.217432161Z" level=info msg="StopPodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\"" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.277 [WARNING][5300] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" WorkloadEndpoint="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.277 [INFO][5300] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.277 [INFO][5300] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" iface="eth0" netns="" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.277 [INFO][5300] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.277 [INFO][5300] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.303 [INFO][5309] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.303 [INFO][5309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.303 [INFO][5309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.312 [WARNING][5309] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.312 [INFO][5309] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.316 [INFO][5309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.324422 env[1210]: 2025-07-11 00:30:13.321 [INFO][5300] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.324902 env[1210]: time="2025-07-11T00:30:13.324867137Z" level=info msg="TearDown network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" successfully" Jul 11 00:30:13.324966 env[1210]: time="2025-07-11T00:30:13.324950857Z" level=info msg="StopPodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" returns successfully" Jul 11 00:30:13.325563 env[1210]: time="2025-07-11T00:30:13.325527255Z" level=info msg="RemovePodSandbox for \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\"" Jul 11 00:30:13.325632 env[1210]: time="2025-07-11T00:30:13.325565695Z" level=info msg="Forcibly stopping sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\"" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.370 [WARNING][5327] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" WorkloadEndpoint="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.370 [INFO][5327] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.370 [INFO][5327] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" iface="eth0" netns="" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.370 [INFO][5327] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.370 [INFO][5327] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.393 [INFO][5336] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.393 [INFO][5336] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.393 [INFO][5336] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.402 [WARNING][5336] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.402 [INFO][5336] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" HandleID="k8s-pod-network.b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Workload="localhost-k8s-whisker--66b6659fdf--6fp9h-eth0" Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.404 [INFO][5336] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.409343 env[1210]: 2025-07-11 00:30:13.407 [INFO][5327] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7" Jul 11 00:30:13.409928 env[1210]: time="2025-07-11T00:30:13.409357609Z" level=info msg="TearDown network for sandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" successfully" Jul 11 00:30:13.412214 env[1210]: time="2025-07-11T00:30:13.412169282Z" level=info msg="RemovePodSandbox \"b2eac62efacaf080b20ccc5b8ca063b4ab65cd35226d9904d18c902e38df64f7\" returns successfully" Jul 11 00:30:13.412815 env[1210]: time="2025-07-11T00:30:13.412789041Z" level=info msg="StopPodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\"" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.449 [WARNING][5354] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7164bfc3-1b61-4f56-8b81-5f68ee41505e", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709", Pod:"coredns-7c65d6cfc9-zhcp8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8979c6012ab", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.452 [INFO][5354] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.452 [INFO][5354] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" iface="eth0" netns="" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.452 [INFO][5354] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.452 [INFO][5354] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.474 [INFO][5363] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.474 [INFO][5363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.474 [INFO][5363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.482 [WARNING][5363] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.482 [INFO][5363] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.483 [INFO][5363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.486995 env[1210]: 2025-07-11 00:30:13.485 [INFO][5354] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.487606 env[1210]: time="2025-07-11T00:30:13.487569177Z" level=info msg="TearDown network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" successfully" Jul 11 00:30:13.487713 env[1210]: time="2025-07-11T00:30:13.487681257Z" level=info msg="StopPodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" returns successfully" Jul 11 00:30:13.488652 env[1210]: time="2025-07-11T00:30:13.488618375Z" level=info msg="RemovePodSandbox for \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\"" Jul 11 00:30:13.488737 env[1210]: time="2025-07-11T00:30:13.488658014Z" level=info msg="Forcibly stopping sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\"" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.522 [WARNING][5380] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7164bfc3-1b61-4f56-8b81-5f68ee41505e", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 29, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1ff15607aea2162869650de2db25307b371b9b6fdc313f1ae02439593d69f709", Pod:"coredns-7c65d6cfc9-zhcp8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8979c6012ab", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.523 [INFO][5380] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.523 [INFO][5380] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" iface="eth0" netns="" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.523 [INFO][5380] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.523 [INFO][5380] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.542 [INFO][5389] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.542 [INFO][5389] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.542 [INFO][5389] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.550 [WARNING][5389] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.550 [INFO][5389] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" HandleID="k8s-pod-network.76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Workload="localhost-k8s-coredns--7c65d6cfc9--zhcp8-eth0" Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.551 [INFO][5389] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:30:13.554952 env[1210]: 2025-07-11 00:30:13.553 [INFO][5380] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918" Jul 11 00:30:13.555440 env[1210]: time="2025-07-11T00:30:13.554986452Z" level=info msg="TearDown network for sandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" successfully" Jul 11 00:30:13.557729 env[1210]: time="2025-07-11T00:30:13.557699245Z" level=info msg="RemovePodSandbox \"76746c9323255c337c836a3e937528bca63e659d3e8c9b940fac47216d689918\" returns successfully" Jul 11 00:30:15.211029 systemd[1]: Started sshd@14-10.0.0.65:22-10.0.0.1:53194.service. Jul 11 00:30:15.217111 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 11 00:30:15.217183 kernel: audit: type=1130 audit(1752193815.209:1520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.65:22-10.0.0.1:53194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:15.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.65:22-10.0.0.1:53194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:15.255000 audit[5400]: USER_ACCT pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.257234 sshd[5400]: Accepted publickey for core from 10.0.0.1 port 53194 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:15.258681 sshd[5400]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:15.256000 audit[5400]: CRED_ACQ pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.262019 kernel: audit: type=1101 audit(1752193815.255:1521): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.262074 kernel: audit: type=1103 audit(1752193815.256:1522): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.262120 kernel: audit: type=1006 audit(1752193815.256:1523): pid=5400 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 11 00:30:15.263428 kernel: audit: type=1300 audit(1752193815.256:1523): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffea16500 a2=3 a3=1 items=0 ppid=1 pid=5400 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:15.256000 audit[5400]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffea16500 a2=3 a3=1 items=0 ppid=1 pid=5400 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:15.262687 systemd-logind[1201]: New session 15 of user core. Jul 11 00:30:15.263192 systemd[1]: Started session-15.scope. Jul 11 00:30:15.256000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:15.265809 kernel: audit: type=1327 audit(1752193815.256:1523): proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:15.266000 audit[5400]: USER_START pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.267000 audit[5402]: CRED_ACQ pid=5402 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.271835 kernel: audit: type=1105 audit(1752193815.266:1524): pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.271892 kernel: audit: type=1103 audit(1752193815.267:1525): pid=5402 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.417571 sshd[5400]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:15.416000 audit[5400]: USER_END pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.417000 audit[5400]: CRED_DISP pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.420329 systemd[1]: sshd@14-10.0.0.65:22-10.0.0.1:53194.service: Deactivated successfully. Jul 11 00:30:15.421094 systemd[1]: session-15.scope: Deactivated successfully. Jul 11 00:30:15.421634 systemd-logind[1201]: Session 15 logged out. Waiting for processes to exit. Jul 11 00:30:15.422449 systemd-logind[1201]: Removed session 15. Jul 11 00:30:15.422908 kernel: audit: type=1106 audit(1752193815.416:1526): pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.422948 kernel: audit: type=1104 audit(1752193815.417:1527): pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:15.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.65:22-10.0.0.1:53194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.207692 kubelet[1948]: I0711 00:30:20.207645 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:30:20.280000 audit[5437]: NETFILTER_CFG table=filter:129 family=2 entries=8 op=nft_register_rule pid=5437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:20.283735 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 11 00:30:20.283883 kernel: audit: type=1325 audit(1752193820.280:1529): table=filter:129 family=2 entries=8 op=nft_register_rule pid=5437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:20.283914 kernel: audit: type=1300 audit(1752193820.280:1529): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd3ea4110 a2=0 a3=1 items=0 ppid=2100 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.280000 audit[5437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd3ea4110 a2=0 a3=1 items=0 ppid=2100 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.286413 kernel: audit: type=1327 audit(1752193820.280:1529): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:20.280000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:20.294000 audit[5437]: NETFILTER_CFG table=nat:130 family=2 entries=38 op=nft_register_chain pid=5437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:20.294000 audit[5437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12772 a0=3 a1=ffffd3ea4110 a2=0 a3=1 items=0 ppid=2100 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.299746 kernel: audit: type=1325 audit(1752193820.294:1530): table=nat:130 family=2 entries=38 op=nft_register_chain pid=5437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:20.299821 kernel: audit: type=1300 audit(1752193820.294:1530): arch=c00000b7 syscall=211 success=yes exit=12772 a0=3 a1=ffffd3ea4110 a2=0 a3=1 items=0 ppid=2100 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.299846 kernel: audit: type=1327 audit(1752193820.294:1530): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:20.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:20.422163 systemd[1]: Started sshd@15-10.0.0.65:22-10.0.0.1:53210.service. Jul 11 00:30:20.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.65:22-10.0.0.1:53210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.425432 kernel: audit: type=1130 audit(1752193820.420:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.65:22-10.0.0.1:53210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.457000 audit[5439]: USER_ACCT pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.460138 sshd[5439]: Accepted publickey for core from 10.0.0.1 port 53210 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:20.461143 sshd[5439]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:20.459000 audit[5439]: CRED_ACQ pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.463678 kernel: audit: type=1101 audit(1752193820.457:1532): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.463737 kernel: audit: type=1103 audit(1752193820.459:1533): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.463759 kernel: audit: type=1006 audit(1752193820.459:1534): pid=5439 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 11 00:30:20.459000 audit[5439]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe24a79f0 a2=3 a3=1 items=0 ppid=1 pid=5439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.459000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:20.465469 systemd-logind[1201]: New session 16 of user core. Jul 11 00:30:20.465931 systemd[1]: Started session-16.scope. Jul 11 00:30:20.468000 audit[5439]: USER_START pid=5439 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.469000 audit[5441]: CRED_ACQ pid=5441 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.594832 sshd[5439]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:20.595000 audit[5439]: USER_END pid=5439 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.595000 audit[5439]: CRED_DISP pid=5439 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.599026 systemd[1]: Started sshd@16-10.0.0.65:22-10.0.0.1:53220.service. Jul 11 00:30:20.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.65:22-10.0.0.1:53220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.599611 systemd[1]: sshd@15-10.0.0.65:22-10.0.0.1:53210.service: Deactivated successfully. Jul 11 00:30:20.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.65:22-10.0.0.1:53210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.600366 systemd[1]: session-16.scope: Deactivated successfully. Jul 11 00:30:20.601147 systemd-logind[1201]: Session 16 logged out. Waiting for processes to exit. Jul 11 00:30:20.601949 systemd-logind[1201]: Removed session 16. Jul 11 00:30:20.632000 audit[5451]: USER_ACCT pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.634140 sshd[5451]: Accepted publickey for core from 10.0.0.1 port 53220 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:20.633000 audit[5451]: CRED_ACQ pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.633000 audit[5451]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff70ed8e0 a2=3 a3=1 items=0 ppid=1 pid=5451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.633000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:20.635932 sshd[5451]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:20.639467 systemd-logind[1201]: New session 17 of user core. Jul 11 00:30:20.640186 systemd[1]: Started session-17.scope. Jul 11 00:30:20.641000 audit[5451]: USER_START pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.643000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.844674 sshd[5451]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:20.845000 audit[5451]: USER_END pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.845000 audit[5451]: CRED_DISP pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.848810 systemd[1]: Started sshd@17-10.0.0.65:22-10.0.0.1:53230.service. Jul 11 00:30:20.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.65:22-10.0.0.1:53230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.849519 systemd[1]: session-17.scope: Deactivated successfully. Jul 11 00:30:20.850063 systemd[1]: sshd@16-10.0.0.65:22-10.0.0.1:53220.service: Deactivated successfully. Jul 11 00:30:20.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.65:22-10.0.0.1:53220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:20.851014 systemd-logind[1201]: Session 17 logged out. Waiting for processes to exit. Jul 11 00:30:20.851709 systemd-logind[1201]: Removed session 17. Jul 11 00:30:20.886000 audit[5464]: USER_ACCT pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.888212 sshd[5464]: Accepted publickey for core from 10.0.0.1 port 53230 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:20.887000 audit[5464]: CRED_ACQ pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.887000 audit[5464]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6a08280 a2=3 a3=1 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:20.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:20.889489 sshd[5464]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:20.893411 systemd-logind[1201]: New session 18 of user core. Jul 11 00:30:20.894361 systemd[1]: Started session-18.scope. Jul 11 00:30:20.896000 audit[5464]: USER_START pid=5464 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:20.897000 audit[5467]: CRED_ACQ pid=5467 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:22.638000 audit[5481]: NETFILTER_CFG table=filter:131 family=2 entries=20 op=nft_register_rule pid=5481 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:22.638000 audit[5481]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffecd726a0 a2=0 a3=1 items=0 ppid=2100 pid=5481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:22.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:22.644384 sshd[5464]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:22.642000 audit[5481]: NETFILTER_CFG table=nat:132 family=2 entries=26 op=nft_register_rule pid=5481 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:22.642000 audit[5481]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffecd726a0 a2=0 a3=1 items=0 ppid=2100 pid=5481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:22.642000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:22.643000 audit[5464]: USER_END pid=5464 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:22.644000 audit[5464]: CRED_DISP pid=5464 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:22.648474 systemd[1]: Started sshd@18-10.0.0.65:22-10.0.0.1:37064.service. Jul 11 00:30:22.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.65:22-10.0.0.1:37064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:22.649047 systemd[1]: sshd@17-10.0.0.65:22-10.0.0.1:53230.service: Deactivated successfully. Jul 11 00:30:22.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.65:22-10.0.0.1:53230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:22.650704 systemd[1]: session-18.scope: Deactivated successfully. Jul 11 00:30:22.651964 systemd-logind[1201]: Session 18 logged out. Waiting for processes to exit. Jul 11 00:30:22.656876 systemd-logind[1201]: Removed session 18. Jul 11 00:30:22.659000 audit[5486]: NETFILTER_CFG table=filter:133 family=2 entries=32 op=nft_register_rule pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:22.659000 audit[5486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd65b07e0 a2=0 a3=1 items=0 ppid=2100 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:22.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:22.664000 audit[5486]: NETFILTER_CFG table=nat:134 family=2 entries=26 op=nft_register_rule pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:22.664000 audit[5486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffd65b07e0 a2=0 a3=1 items=0 ppid=2100 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:22.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:22.686000 audit[5483]: USER_ACCT pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:22.688526 sshd[5483]: Accepted publickey for core from 10.0.0.1 port 37064 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:22.688000 audit[5483]: CRED_ACQ pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:22.688000 audit[5483]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1ebf920 a2=3 a3=1 items=0 ppid=1 pid=5483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:22.688000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:22.689872 sshd[5483]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:22.693189 systemd-logind[1201]: New session 19 of user core. Jul 11 00:30:22.694055 systemd[1]: Started session-19.scope. Jul 11 00:30:22.695000 audit[5483]: USER_START pid=5483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:22.697000 audit[5488]: CRED_ACQ pid=5488 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.087360 sshd[5483]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:23.087000 audit[5483]: USER_END pid=5483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.087000 audit[5483]: CRED_DISP pid=5483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.092157 systemd[1]: sshd@18-10.0.0.65:22-10.0.0.1:37064.service: Deactivated successfully. Jul 11 00:30:23.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.65:22-10.0.0.1:37064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:23.092838 systemd[1]: session-19.scope: Deactivated successfully. Jul 11 00:30:23.093406 systemd-logind[1201]: Session 19 logged out. Waiting for processes to exit. Jul 11 00:30:23.094873 systemd[1]: Started sshd@19-10.0.0.65:22-10.0.0.1:37068.service. Jul 11 00:30:23.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.65:22-10.0.0.1:37068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:23.095758 systemd-logind[1201]: Removed session 19. Jul 11 00:30:23.128000 audit[5498]: USER_ACCT pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.130540 sshd[5498]: Accepted publickey for core from 10.0.0.1 port 37068 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:23.129000 audit[5498]: CRED_ACQ pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.130000 audit[5498]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbd69450 a2=3 a3=1 items=0 ppid=1 pid=5498 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:23.130000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:23.131932 sshd[5498]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:23.135430 systemd-logind[1201]: New session 20 of user core. Jul 11 00:30:23.136796 systemd[1]: Started session-20.scope. Jul 11 00:30:23.139000 audit[5498]: USER_START pid=5498 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.140000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.276757 sshd[5498]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:23.277000 audit[5498]: USER_END pid=5498 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.277000 audit[5498]: CRED_DISP pid=5498 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:23.280100 systemd[1]: sshd@19-10.0.0.65:22-10.0.0.1:37068.service: Deactivated successfully. Jul 11 00:30:23.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.65:22-10.0.0.1:37068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:23.280933 systemd[1]: session-20.scope: Deactivated successfully. Jul 11 00:30:23.281502 systemd-logind[1201]: Session 20 logged out. Waiting for processes to exit. Jul 11 00:30:23.282200 systemd-logind[1201]: Removed session 20. Jul 11 00:30:23.654042 systemd[1]: run-containerd-runc-k8s.io-8e98cc34d65a5f786696857548fd084f8146b88e41e3086e7df192c9101f3da8-runc.4Gcjqo.mount: Deactivated successfully. Jul 11 00:30:26.367464 kubelet[1948]: E0711 00:30:26.367419 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:30:27.492000 audit[5557]: NETFILTER_CFG table=filter:135 family=2 entries=20 op=nft_register_rule pid=5557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:27.496486 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 11 00:30:27.496559 kernel: audit: type=1325 audit(1752193827.492:1580): table=filter:135 family=2 entries=20 op=nft_register_rule pid=5557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:27.496586 kernel: audit: type=1300 audit(1752193827.492:1580): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd1a84930 a2=0 a3=1 items=0 ppid=2100 pid=5557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:27.492000 audit[5557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd1a84930 a2=0 a3=1 items=0 ppid=2100 pid=5557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:27.499232 kernel: audit: type=1327 audit(1752193827.492:1580): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:27.492000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:27.505000 audit[5557]: NETFILTER_CFG table=nat:136 family=2 entries=110 op=nft_register_chain pid=5557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:27.505000 audit[5557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd1a84930 a2=0 a3=1 items=0 ppid=2100 pid=5557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:27.511696 kernel: audit: type=1325 audit(1752193827.505:1581): table=nat:136 family=2 entries=110 op=nft_register_chain pid=5557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:30:27.511762 kernel: audit: type=1300 audit(1752193827.505:1581): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd1a84930 a2=0 a3=1 items=0 ppid=2100 pid=5557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:27.511791 kernel: audit: type=1327 audit(1752193827.505:1581): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:27.505000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:30:28.282042 systemd[1]: Started sshd@20-10.0.0.65:22-10.0.0.1:37076.service. Jul 11 00:30:28.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.65:22-10.0.0.1:37076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:28.287734 kernel: audit: type=1130 audit(1752193828.280:1582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.65:22-10.0.0.1:37076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:28.323000 audit[5560]: USER_ACCT pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.325693 sshd[5560]: Accepted publickey for core from 10.0.0.1 port 37076 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:28.327883 sshd[5560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:28.325000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.330419 kernel: audit: type=1101 audit(1752193828.323:1583): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.330516 kernel: audit: type=1103 audit(1752193828.325:1584): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.330543 kernel: audit: type=1006 audit(1752193828.325:1585): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 11 00:30:28.325000 audit[5560]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda938510 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:28.325000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:28.334914 systemd-logind[1201]: New session 21 of user core. Jul 11 00:30:28.335837 systemd[1]: Started session-21.scope. Jul 11 00:30:28.338000 audit[5560]: USER_START pid=5560 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.340000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.484221 sshd[5560]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:28.483000 audit[5560]: USER_END pid=5560 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.483000 audit[5560]: CRED_DISP pid=5560 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:28.486966 systemd[1]: sshd@20-10.0.0.65:22-10.0.0.1:37076.service: Deactivated successfully. Jul 11 00:30:28.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.65:22-10.0.0.1:37076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:28.487775 systemd[1]: session-21.scope: Deactivated successfully. Jul 11 00:30:28.488279 systemd-logind[1201]: Session 21 logged out. Waiting for processes to exit. Jul 11 00:30:28.488972 systemd-logind[1201]: Removed session 21. Jul 11 00:30:33.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.65:22-10.0.0.1:35644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:33.489521 systemd[1]: Started sshd@21-10.0.0.65:22-10.0.0.1:35644.service. Jul 11 00:30:33.493339 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 11 00:30:33.493441 kernel: audit: type=1130 audit(1752193833.489:1591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.65:22-10.0.0.1:35644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:33.528000 audit[5573]: USER_ACCT pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.528877 sshd[5573]: Accepted publickey for core from 10.0.0.1 port 35644 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:33.530148 sshd[5573]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:33.529000 audit[5573]: CRED_ACQ pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.533987 kernel: audit: type=1101 audit(1752193833.528:1592): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.534063 kernel: audit: type=1103 audit(1752193833.529:1593): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.534089 kernel: audit: type=1006 audit(1752193833.529:1594): pid=5573 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 11 00:30:33.534738 systemd-logind[1201]: New session 22 of user core. Jul 11 00:30:33.529000 audit[5573]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0033270 a2=3 a3=1 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:33.535641 systemd[1]: Started session-22.scope. Jul 11 00:30:33.538222 kernel: audit: type=1300 audit(1752193833.529:1594): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0033270 a2=3 a3=1 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:33.538289 kernel: audit: type=1327 audit(1752193833.529:1594): proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:33.529000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:33.539000 audit[5573]: USER_START pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.540000 audit[5575]: CRED_ACQ pid=5575 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.544989 kernel: audit: type=1105 audit(1752193833.539:1595): pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.545092 kernel: audit: type=1103 audit(1752193833.540:1596): pid=5575 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.694478 sshd[5573]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:33.694000 audit[5573]: USER_END pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.696823 systemd[1]: session-22.scope: Deactivated successfully. Jul 11 00:30:33.697349 systemd-logind[1201]: Session 22 logged out. Waiting for processes to exit. Jul 11 00:30:33.697497 systemd[1]: sshd@21-10.0.0.65:22-10.0.0.1:35644.service: Deactivated successfully. Jul 11 00:30:33.698462 systemd-logind[1201]: Removed session 22. Jul 11 00:30:33.695000 audit[5573]: CRED_DISP pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.701042 kernel: audit: type=1106 audit(1752193833.694:1597): pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.701096 kernel: audit: type=1104 audit(1752193833.695:1598): pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:33.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.65:22-10.0.0.1:35644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:35.367442 kubelet[1948]: E0711 00:30:35.367383 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:30:38.699848 systemd[1]: Started sshd@22-10.0.0.65:22-10.0.0.1:35650.service. Jul 11 00:30:38.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.65:22-10.0.0.1:35650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:38.703783 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 11 00:30:38.703884 kernel: audit: type=1130 audit(1752193838.700:1600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.65:22-10.0.0.1:35650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:38.736000 audit[5589]: USER_ACCT pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.737141 sshd[5589]: Accepted publickey for core from 10.0.0.1 port 35650 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:38.738762 sshd[5589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:38.738000 audit[5589]: CRED_ACQ pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.741935 kernel: audit: type=1101 audit(1752193838.736:1601): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.742008 kernel: audit: type=1103 audit(1752193838.738:1602): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.743655 kernel: audit: type=1006 audit(1752193838.738:1603): pid=5589 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 11 00:30:38.743704 kernel: audit: type=1300 audit(1752193838.738:1603): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f7c550 a2=3 a3=1 items=0 ppid=1 pid=5589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:38.738000 audit[5589]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f7c550 a2=3 a3=1 items=0 ppid=1 pid=5589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:38.738000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:38.747479 kernel: audit: type=1327 audit(1752193838.738:1603): proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:38.748894 systemd-logind[1201]: New session 23 of user core. Jul 11 00:30:38.749733 systemd[1]: Started session-23.scope. Jul 11 00:30:38.752000 audit[5589]: USER_START pid=5589 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.754000 audit[5591]: CRED_ACQ pid=5591 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.758294 kernel: audit: type=1105 audit(1752193838.752:1604): pid=5589 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.758346 kernel: audit: type=1103 audit(1752193838.754:1605): pid=5591 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.905691 sshd[5589]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:38.906000 audit[5589]: USER_END pid=5589 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.908982 systemd[1]: sshd@22-10.0.0.65:22-10.0.0.1:35650.service: Deactivated successfully. Jul 11 00:30:38.909761 systemd[1]: session-23.scope: Deactivated successfully. Jul 11 00:30:38.907000 audit[5589]: CRED_DISP pid=5589 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.912158 kernel: audit: type=1106 audit(1752193838.906:1606): pid=5589 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.912242 kernel: audit: type=1104 audit(1752193838.907:1607): pid=5589 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:38.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.65:22-10.0.0.1:35650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:38.912809 systemd-logind[1201]: Session 23 logged out. Waiting for processes to exit. Jul 11 00:30:38.913738 systemd-logind[1201]: Removed session 23. Jul 11 00:30:42.371033 kubelet[1948]: E0711 00:30:42.370992 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:30:43.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.65:22-10.0.0.1:38788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:43.911641 systemd[1]: Started sshd@23-10.0.0.65:22-10.0.0.1:38788.service. Jul 11 00:30:43.912927 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 11 00:30:43.912979 kernel: audit: type=1130 audit(1752193843.911:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.65:22-10.0.0.1:38788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:43.955000 audit[5623]: USER_ACCT pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.956344 sshd[5623]: Accepted publickey for core from 10.0.0.1 port 38788 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:30:43.959433 kernel: audit: type=1101 audit(1752193843.955:1610): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.961000 audit[5623]: CRED_ACQ pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.962322 sshd[5623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:30:43.965645 kernel: audit: type=1103 audit(1752193843.961:1611): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.965723 kernel: audit: type=1006 audit(1752193843.961:1612): pid=5623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 11 00:30:43.965749 kernel: audit: type=1300 audit(1752193843.961:1612): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc31c0600 a2=3 a3=1 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:43.961000 audit[5623]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc31c0600 a2=3 a3=1 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:30:43.967410 systemd[1]: Started session-24.scope. Jul 11 00:30:43.967704 systemd-logind[1201]: New session 24 of user core. Jul 11 00:30:43.961000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:43.969544 kernel: audit: type=1327 audit(1752193843.961:1612): proctitle=737368643A20636F7265205B707269765D Jul 11 00:30:43.972000 audit[5623]: USER_START pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.974000 audit[5625]: CRED_ACQ pid=5625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.980234 kernel: audit: type=1105 audit(1752193843.972:1613): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:43.980298 kernel: audit: type=1103 audit(1752193843.974:1614): pid=5625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:44.108772 sshd[5623]: pam_unix(sshd:session): session closed for user core Jul 11 00:30:44.109000 audit[5623]: USER_END pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:44.111705 systemd[1]: sshd@23-10.0.0.65:22-10.0.0.1:38788.service: Deactivated successfully. Jul 11 00:30:44.112593 systemd[1]: session-24.scope: Deactivated successfully. Jul 11 00:30:44.116424 kernel: audit: type=1106 audit(1752193844.109:1615): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:44.116511 kernel: audit: type=1104 audit(1752193844.109:1616): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:44.109000 audit[5623]: CRED_DISP pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:30:44.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.65:22-10.0.0.1:38788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:30:44.114165 systemd-logind[1201]: Session 24 logged out. Waiting for processes to exit. Jul 11 00:30:44.115377 systemd-logind[1201]: Removed session 24.