Jul 11 00:25:59.802985 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 11 00:25:59.803004 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Thu Jul 10 23:22:35 -00 2025 Jul 11 00:25:59.803012 kernel: efi: EFI v2.70 by EDK II Jul 11 00:25:59.803018 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 11 00:25:59.803023 kernel: random: crng init done Jul 11 00:25:59.803028 kernel: ACPI: Early table checksum verification disabled Jul 11 00:25:59.803035 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 11 00:25:59.803042 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 11 00:25:59.803048 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803053 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803059 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803064 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803069 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803075 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803083 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803089 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803095 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:25:59.803101 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 11 00:25:59.803106 kernel: NUMA: Failed to initialise from firmware Jul 11 00:25:59.803112 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:25:59.803118 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 11 00:25:59.803124 kernel: Zone ranges: Jul 11 00:25:59.803131 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:25:59.803137 kernel: DMA32 empty Jul 11 00:25:59.803143 kernel: Normal empty Jul 11 00:25:59.803149 kernel: Movable zone start for each node Jul 11 00:25:59.803155 kernel: Early memory node ranges Jul 11 00:25:59.803161 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 11 00:25:59.803167 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 11 00:25:59.803173 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 11 00:25:59.803179 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 11 00:25:59.803185 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 11 00:25:59.803191 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 11 00:25:59.803197 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 11 00:25:59.803213 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:25:59.803222 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 11 00:25:59.803227 kernel: psci: probing for conduit method from ACPI. Jul 11 00:25:59.803233 kernel: psci: PSCIv1.1 detected in firmware. Jul 11 00:25:59.803239 kernel: psci: Using standard PSCI v0.2 function IDs Jul 11 00:25:59.803245 kernel: psci: Trusted OS migration not required Jul 11 00:25:59.803254 kernel: psci: SMC Calling Convention v1.1 Jul 11 00:25:59.803260 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 11 00:25:59.803268 kernel: ACPI: SRAT not present Jul 11 00:25:59.803274 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 11 00:25:59.803280 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 11 00:25:59.803287 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 11 00:25:59.803293 kernel: Detected PIPT I-cache on CPU0 Jul 11 00:25:59.803299 kernel: CPU features: detected: GIC system register CPU interface Jul 11 00:25:59.803305 kernel: CPU features: detected: Hardware dirty bit management Jul 11 00:25:59.803311 kernel: CPU features: detected: Spectre-v4 Jul 11 00:25:59.803318 kernel: CPU features: detected: Spectre-BHB Jul 11 00:25:59.803325 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 11 00:25:59.803331 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 11 00:25:59.803337 kernel: CPU features: detected: ARM erratum 1418040 Jul 11 00:25:59.803344 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 11 00:25:59.803350 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 11 00:25:59.803357 kernel: Policy zone: DMA Jul 11 00:25:59.803364 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:25:59.803371 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 11 00:25:59.803377 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 11 00:25:59.803383 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 11 00:25:59.803389 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 11 00:25:59.803397 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 11 00:25:59.803404 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 11 00:25:59.803410 kernel: trace event string verifier disabled Jul 11 00:25:59.803416 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 11 00:25:59.803423 kernel: rcu: RCU event tracing is enabled. Jul 11 00:25:59.803429 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 11 00:25:59.803436 kernel: Trampoline variant of Tasks RCU enabled. Jul 11 00:25:59.803442 kernel: Tracing variant of Tasks RCU enabled. Jul 11 00:25:59.803448 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 11 00:25:59.803455 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 11 00:25:59.803461 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 11 00:25:59.803468 kernel: GICv3: 256 SPIs implemented Jul 11 00:25:59.803474 kernel: GICv3: 0 Extended SPIs implemented Jul 11 00:25:59.803480 kernel: GICv3: Distributor has no Range Selector support Jul 11 00:25:59.803486 kernel: Root IRQ handler: gic_handle_irq Jul 11 00:25:59.803492 kernel: GICv3: 16 PPIs implemented Jul 11 00:25:59.803499 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 11 00:25:59.803505 kernel: ACPI: SRAT not present Jul 11 00:25:59.803511 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 11 00:25:59.803517 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 11 00:25:59.803524 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 11 00:25:59.803530 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 11 00:25:59.803536 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 11 00:25:59.803544 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:25:59.803550 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 11 00:25:59.803557 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 11 00:25:59.803563 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 11 00:25:59.803569 kernel: arm-pv: using stolen time PV Jul 11 00:25:59.803576 kernel: Console: colour dummy device 80x25 Jul 11 00:25:59.803582 kernel: ACPI: Core revision 20210730 Jul 11 00:25:59.803589 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 11 00:25:59.803595 kernel: pid_max: default: 32768 minimum: 301 Jul 11 00:25:59.803601 kernel: LSM: Security Framework initializing Jul 11 00:25:59.803609 kernel: SELinux: Initializing. Jul 11 00:25:59.803615 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:25:59.803621 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:25:59.803628 kernel: rcu: Hierarchical SRCU implementation. Jul 11 00:25:59.803634 kernel: Platform MSI: ITS@0x8080000 domain created Jul 11 00:25:59.803640 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 11 00:25:59.803646 kernel: Remapping and enabling EFI services. Jul 11 00:25:59.803653 kernel: smp: Bringing up secondary CPUs ... Jul 11 00:25:59.803659 kernel: Detected PIPT I-cache on CPU1 Jul 11 00:25:59.803667 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 11 00:25:59.803679 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 11 00:25:59.803686 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:25:59.803693 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 11 00:25:59.803699 kernel: Detected PIPT I-cache on CPU2 Jul 11 00:25:59.803706 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 11 00:25:59.803712 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 11 00:25:59.803718 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:25:59.803725 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 11 00:25:59.803731 kernel: Detected PIPT I-cache on CPU3 Jul 11 00:25:59.803739 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 11 00:25:59.803745 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 11 00:25:59.803752 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:25:59.803758 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 11 00:25:59.803769 kernel: smp: Brought up 1 node, 4 CPUs Jul 11 00:25:59.803777 kernel: SMP: Total of 4 processors activated. Jul 11 00:25:59.803783 kernel: CPU features: detected: 32-bit EL0 Support Jul 11 00:25:59.803790 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 11 00:25:59.803797 kernel: CPU features: detected: Common not Private translations Jul 11 00:25:59.803803 kernel: CPU features: detected: CRC32 instructions Jul 11 00:25:59.803810 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 11 00:25:59.803817 kernel: CPU features: detected: LSE atomic instructions Jul 11 00:25:59.803825 kernel: CPU features: detected: Privileged Access Never Jul 11 00:25:59.803831 kernel: CPU features: detected: RAS Extension Support Jul 11 00:25:59.803838 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 11 00:25:59.803845 kernel: CPU: All CPU(s) started at EL1 Jul 11 00:25:59.803851 kernel: alternatives: patching kernel code Jul 11 00:25:59.803859 kernel: devtmpfs: initialized Jul 11 00:25:59.803866 kernel: KASLR enabled Jul 11 00:25:59.803872 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 11 00:25:59.803879 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 11 00:25:59.803886 kernel: pinctrl core: initialized pinctrl subsystem Jul 11 00:25:59.803892 kernel: SMBIOS 3.0.0 present. Jul 11 00:25:59.803899 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 11 00:25:59.803906 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 11 00:25:59.803913 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 11 00:25:59.803921 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 11 00:25:59.803928 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 11 00:25:59.803935 kernel: audit: initializing netlink subsys (disabled) Jul 11 00:25:59.803941 kernel: audit: type=2000 audit(0.034:1): state=initialized audit_enabled=0 res=1 Jul 11 00:25:59.803948 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 11 00:25:59.803955 kernel: cpuidle: using governor menu Jul 11 00:25:59.803961 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 11 00:25:59.803968 kernel: ASID allocator initialised with 32768 entries Jul 11 00:25:59.803974 kernel: ACPI: bus type PCI registered Jul 11 00:25:59.803982 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 11 00:25:59.803989 kernel: Serial: AMBA PL011 UART driver Jul 11 00:25:59.803996 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 11 00:25:59.804002 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 11 00:25:59.804009 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 11 00:25:59.804017 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 11 00:25:59.804024 kernel: cryptd: max_cpu_qlen set to 1000 Jul 11 00:25:59.804031 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 11 00:25:59.804038 kernel: ACPI: Added _OSI(Module Device) Jul 11 00:25:59.804045 kernel: ACPI: Added _OSI(Processor Device) Jul 11 00:25:59.804052 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 11 00:25:59.804059 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 11 00:25:59.804065 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 11 00:25:59.804072 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 11 00:25:59.804079 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 11 00:25:59.804085 kernel: ACPI: Interpreter enabled Jul 11 00:25:59.804092 kernel: ACPI: Using GIC for interrupt routing Jul 11 00:25:59.804099 kernel: ACPI: MCFG table detected, 1 entries Jul 11 00:25:59.804107 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 11 00:25:59.804113 kernel: printk: console [ttyAMA0] enabled Jul 11 00:25:59.804120 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 11 00:25:59.804288 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 11 00:25:59.804357 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 11 00:25:59.804417 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 11 00:25:59.804476 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 11 00:25:59.804539 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 11 00:25:59.804548 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 11 00:25:59.804555 kernel: PCI host bridge to bus 0000:00 Jul 11 00:25:59.804624 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 11 00:25:59.804687 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 11 00:25:59.804742 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 11 00:25:59.804795 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 11 00:25:59.804876 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 11 00:25:59.804951 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 11 00:25:59.805013 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 11 00:25:59.805074 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 11 00:25:59.805133 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:25:59.805193 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:25:59.805267 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 11 00:25:59.805330 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 11 00:25:59.805384 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 11 00:25:59.805437 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 11 00:25:59.805491 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 11 00:25:59.805500 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 11 00:25:59.805507 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 11 00:25:59.805514 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 11 00:25:59.805522 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 11 00:25:59.805529 kernel: iommu: Default domain type: Translated Jul 11 00:25:59.805536 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 11 00:25:59.805542 kernel: vgaarb: loaded Jul 11 00:25:59.805549 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 11 00:25:59.805556 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 11 00:25:59.805563 kernel: PTP clock support registered Jul 11 00:25:59.805570 kernel: Registered efivars operations Jul 11 00:25:59.805577 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 11 00:25:59.805583 kernel: VFS: Disk quotas dquot_6.6.0 Jul 11 00:25:59.805592 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 11 00:25:59.805598 kernel: pnp: PnP ACPI init Jul 11 00:25:59.805663 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 11 00:25:59.805679 kernel: pnp: PnP ACPI: found 1 devices Jul 11 00:25:59.805686 kernel: NET: Registered PF_INET protocol family Jul 11 00:25:59.805694 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 11 00:25:59.805701 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 11 00:25:59.805708 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 11 00:25:59.805716 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 11 00:25:59.805723 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 11 00:25:59.805730 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 11 00:25:59.805737 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:25:59.805744 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:25:59.805750 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 11 00:25:59.805757 kernel: PCI: CLS 0 bytes, default 64 Jul 11 00:25:59.805764 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 11 00:25:59.805770 kernel: kvm [1]: HYP mode not available Jul 11 00:25:59.805778 kernel: Initialise system trusted keyrings Jul 11 00:25:59.805785 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 11 00:25:59.805792 kernel: Key type asymmetric registered Jul 11 00:25:59.805798 kernel: Asymmetric key parser 'x509' registered Jul 11 00:25:59.805805 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 11 00:25:59.805812 kernel: io scheduler mq-deadline registered Jul 11 00:25:59.805818 kernel: io scheduler kyber registered Jul 11 00:25:59.805825 kernel: io scheduler bfq registered Jul 11 00:25:59.805831 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 11 00:25:59.805839 kernel: ACPI: button: Power Button [PWRB] Jul 11 00:25:59.805846 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 11 00:25:59.805908 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 11 00:25:59.805918 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 11 00:25:59.805924 kernel: thunder_xcv, ver 1.0 Jul 11 00:25:59.805931 kernel: thunder_bgx, ver 1.0 Jul 11 00:25:59.805937 kernel: nicpf, ver 1.0 Jul 11 00:25:59.805944 kernel: nicvf, ver 1.0 Jul 11 00:25:59.806011 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 11 00:25:59.806071 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-11T00:25:59 UTC (1752193559) Jul 11 00:25:59.806080 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 11 00:25:59.806087 kernel: NET: Registered PF_INET6 protocol family Jul 11 00:25:59.806094 kernel: Segment Routing with IPv6 Jul 11 00:25:59.806100 kernel: In-situ OAM (IOAM) with IPv6 Jul 11 00:25:59.806107 kernel: NET: Registered PF_PACKET protocol family Jul 11 00:25:59.806113 kernel: Key type dns_resolver registered Jul 11 00:25:59.806120 kernel: registered taskstats version 1 Jul 11 00:25:59.806128 kernel: Loading compiled-in X.509 certificates Jul 11 00:25:59.806135 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: e29f2f0310c2b60e0457f826e7476605fb3b6ab2' Jul 11 00:25:59.806142 kernel: Key type .fscrypt registered Jul 11 00:25:59.806148 kernel: Key type fscrypt-provisioning registered Jul 11 00:25:59.806155 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 11 00:25:59.806162 kernel: ima: Allocated hash algorithm: sha1 Jul 11 00:25:59.806169 kernel: ima: No architecture policies found Jul 11 00:25:59.806175 kernel: clk: Disabling unused clocks Jul 11 00:25:59.806182 kernel: Freeing unused kernel memory: 36416K Jul 11 00:25:59.806190 kernel: Run /init as init process Jul 11 00:25:59.806197 kernel: with arguments: Jul 11 00:25:59.806219 kernel: /init Jul 11 00:25:59.806227 kernel: with environment: Jul 11 00:25:59.806234 kernel: HOME=/ Jul 11 00:25:59.806240 kernel: TERM=linux Jul 11 00:25:59.806247 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 11 00:25:59.806256 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:25:59.806266 systemd[1]: Detected virtualization kvm. Jul 11 00:25:59.806274 systemd[1]: Detected architecture arm64. Jul 11 00:25:59.806281 systemd[1]: Running in initrd. Jul 11 00:25:59.806288 systemd[1]: No hostname configured, using default hostname. Jul 11 00:25:59.806295 systemd[1]: Hostname set to . Jul 11 00:25:59.806303 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:25:59.806310 systemd[1]: Queued start job for default target initrd.target. Jul 11 00:25:59.806317 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:25:59.806326 systemd[1]: Reached target cryptsetup.target. Jul 11 00:25:59.806333 systemd[1]: Reached target paths.target. Jul 11 00:25:59.806340 systemd[1]: Reached target slices.target. Jul 11 00:25:59.806347 systemd[1]: Reached target swap.target. Jul 11 00:25:59.806354 systemd[1]: Reached target timers.target. Jul 11 00:25:59.806361 systemd[1]: Listening on iscsid.socket. Jul 11 00:25:59.806369 systemd[1]: Listening on iscsiuio.socket. Jul 11 00:25:59.806377 systemd[1]: Listening on systemd-journald-audit.socket. Jul 11 00:25:59.806384 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 11 00:25:59.806391 systemd[1]: Listening on systemd-journald.socket. Jul 11 00:25:59.806398 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:25:59.806405 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:25:59.806413 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:25:59.806420 systemd[1]: Reached target sockets.target. Jul 11 00:25:59.806427 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:25:59.806434 systemd[1]: Finished network-cleanup.service. Jul 11 00:25:59.806442 systemd[1]: Starting systemd-fsck-usr.service... Jul 11 00:25:59.806449 systemd[1]: Starting systemd-journald.service... Jul 11 00:25:59.806456 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:25:59.806463 systemd[1]: Starting systemd-resolved.service... Jul 11 00:25:59.806470 systemd[1]: Starting systemd-vconsole-setup.service... Jul 11 00:25:59.806477 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:25:59.806484 systemd[1]: Finished systemd-fsck-usr.service. Jul 11 00:25:59.806491 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 11 00:25:59.806498 systemd[1]: Finished systemd-vconsole-setup.service. Jul 11 00:25:59.806507 systemd[1]: Starting dracut-cmdline-ask.service... Jul 11 00:25:59.806518 systemd-journald[290]: Journal started Jul 11 00:25:59.806559 systemd-journald[290]: Runtime Journal (/run/log/journal/297efe7cf07b417ba56750e678aa827b) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:25:59.793738 systemd-modules-load[291]: Inserted module 'overlay' Jul 11 00:25:59.810615 systemd[1]: Started systemd-journald.service. Jul 11 00:25:59.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.811011 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 11 00:25:59.816266 kernel: audit: type=1130 audit(1752193559.810:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.816293 kernel: audit: type=1130 audit(1752193559.813:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.815284 systemd-resolved[292]: Positive Trust Anchors: Jul 11 00:25:59.815291 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:25:59.815317 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:25:59.827343 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 11 00:25:59.829923 systemd[1]: Finished dracut-cmdline-ask.service. Jul 11 00:25:59.832381 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 11 00:25:59.831779 systemd[1]: Started systemd-resolved.service. Jul 11 00:25:59.832939 systemd[1]: Reached target nss-lookup.target. Jul 11 00:25:59.838217 kernel: audit: type=1130 audit(1752193559.831:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.838236 kernel: audit: type=1130 audit(1752193559.832:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.838850 systemd[1]: Starting dracut-cmdline.service... Jul 11 00:25:59.840291 kernel: Bridge firewalling registered Jul 11 00:25:59.839169 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 11 00:25:59.850394 dracut-cmdline[307]: dracut-dracut-053 Jul 11 00:25:59.852225 kernel: SCSI subsystem initialized Jul 11 00:25:59.853814 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:25:59.861748 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 11 00:25:59.861784 kernel: device-mapper: uevent: version 1.0.3 Jul 11 00:25:59.861793 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 11 00:25:59.865609 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 11 00:25:59.866461 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:25:59.867999 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:25:59.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.872232 kernel: audit: type=1130 audit(1752193559.866:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.877548 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:25:59.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.881233 kernel: audit: type=1130 audit(1752193559.877:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:25:59.936230 kernel: Loading iSCSI transport class v2.0-870. Jul 11 00:25:59.948226 kernel: iscsi: registered transport (tcp) Jul 11 00:25:59.964458 kernel: iscsi: registered transport (qla4xxx) Jul 11 00:25:59.964502 kernel: QLogic iSCSI HBA Driver Jul 11 00:25:59.998992 systemd[1]: Finished dracut-cmdline.service. Jul 11 00:25:59.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.000448 systemd[1]: Starting dracut-pre-udev.service... Jul 11 00:26:00.002905 kernel: audit: type=1130 audit(1752193559.999:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.042224 kernel: raid6: neonx8 gen() 13756 MB/s Jul 11 00:26:00.059214 kernel: raid6: neonx8 xor() 10800 MB/s Jul 11 00:26:00.076214 kernel: raid6: neonx4 gen() 13516 MB/s Jul 11 00:26:00.093212 kernel: raid6: neonx4 xor() 11173 MB/s Jul 11 00:26:00.110215 kernel: raid6: neonx2 gen() 13066 MB/s Jul 11 00:26:00.127216 kernel: raid6: neonx2 xor() 10275 MB/s Jul 11 00:26:00.144212 kernel: raid6: neonx1 gen() 10517 MB/s Jul 11 00:26:00.161222 kernel: raid6: neonx1 xor() 8743 MB/s Jul 11 00:26:00.178219 kernel: raid6: int64x8 gen() 6265 MB/s Jul 11 00:26:00.195222 kernel: raid6: int64x8 xor() 3540 MB/s Jul 11 00:26:00.212219 kernel: raid6: int64x4 gen() 7227 MB/s Jul 11 00:26:00.229217 kernel: raid6: int64x4 xor() 3854 MB/s Jul 11 00:26:00.246217 kernel: raid6: int64x2 gen() 6120 MB/s Jul 11 00:26:00.263218 kernel: raid6: int64x2 xor() 3308 MB/s Jul 11 00:26:00.280218 kernel: raid6: int64x1 gen() 5037 MB/s Jul 11 00:26:00.297610 kernel: raid6: int64x1 xor() 2644 MB/s Jul 11 00:26:00.297621 kernel: raid6: using algorithm neonx8 gen() 13756 MB/s Jul 11 00:26:00.297629 kernel: raid6: .... xor() 10800 MB/s, rmw enabled Jul 11 00:26:00.297638 kernel: raid6: using neon recovery algorithm Jul 11 00:26:00.308221 kernel: xor: measuring software checksum speed Jul 11 00:26:00.309217 kernel: 8regs : 15843 MB/sec Jul 11 00:26:00.309228 kernel: 32regs : 20717 MB/sec Jul 11 00:26:00.310218 kernel: arm64_neon : 25964 MB/sec Jul 11 00:26:00.310228 kernel: xor: using function: arm64_neon (25964 MB/sec) Jul 11 00:26:00.382227 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 11 00:26:00.396848 systemd[1]: Finished dracut-pre-udev.service. Jul 11 00:26:00.400589 kernel: audit: type=1130 audit(1752193560.397:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.400616 kernel: audit: type=1334 audit(1752193560.399:10): prog-id=7 op=LOAD Jul 11 00:26:00.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.399000 audit: BPF prog-id=7 op=LOAD Jul 11 00:26:00.400000 audit: BPF prog-id=8 op=LOAD Jul 11 00:26:00.401014 systemd[1]: Starting systemd-udevd.service... Jul 11 00:26:00.413886 systemd-udevd[489]: Using default interface naming scheme 'v252'. Jul 11 00:26:00.417302 systemd[1]: Started systemd-udevd.service. Jul 11 00:26:00.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.418808 systemd[1]: Starting dracut-pre-trigger.service... Jul 11 00:26:00.431256 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Jul 11 00:26:00.461559 systemd[1]: Finished dracut-pre-trigger.service. Jul 11 00:26:00.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.463010 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:26:00.498537 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:26:00.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:00.539740 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 11 00:26:00.544176 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 11 00:26:00.544191 kernel: GPT:9289727 != 19775487 Jul 11 00:26:00.544221 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 11 00:26:00.544232 kernel: GPT:9289727 != 19775487 Jul 11 00:26:00.544240 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 11 00:26:00.544248 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:26:00.559227 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (536) Jul 11 00:26:00.559763 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 11 00:26:00.560598 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 11 00:26:00.565042 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 11 00:26:00.570875 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 11 00:26:00.575934 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:26:00.577446 systemd[1]: Starting disk-uuid.service... Jul 11 00:26:00.583112 disk-uuid[561]: Primary Header is updated. Jul 11 00:26:00.583112 disk-uuid[561]: Secondary Entries is updated. Jul 11 00:26:00.583112 disk-uuid[561]: Secondary Header is updated. Jul 11 00:26:00.586220 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:26:01.597228 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:26:01.597374 disk-uuid[562]: The operation has completed successfully. Jul 11 00:26:01.622759 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 11 00:26:01.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.622854 systemd[1]: Finished disk-uuid.service. Jul 11 00:26:01.624695 systemd[1]: Starting verity-setup.service... Jul 11 00:26:01.639232 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 11 00:26:01.660792 systemd[1]: Found device dev-mapper-usr.device. Jul 11 00:26:01.662216 systemd[1]: Mounting sysusr-usr.mount... Jul 11 00:26:01.666752 systemd[1]: Finished verity-setup.service. Jul 11 00:26:01.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.715168 systemd[1]: Mounted sysusr-usr.mount. Jul 11 00:26:01.716181 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 11 00:26:01.715836 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 11 00:26:01.716557 systemd[1]: Starting ignition-setup.service... Jul 11 00:26:01.718257 systemd[1]: Starting parse-ip-for-networkd.service... Jul 11 00:26:01.725631 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:26:01.725725 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:26:01.725757 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:26:01.733307 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 11 00:26:01.739967 systemd[1]: Finished ignition-setup.service. Jul 11 00:26:01.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.741345 systemd[1]: Starting ignition-fetch-offline.service... Jul 11 00:26:01.797094 systemd[1]: Finished parse-ip-for-networkd.service. Jul 11 00:26:01.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.798000 audit: BPF prog-id=9 op=LOAD Jul 11 00:26:01.798979 systemd[1]: Starting systemd-networkd.service... Jul 11 00:26:01.826235 ignition[649]: Ignition 2.14.0 Jul 11 00:26:01.826877 systemd-networkd[738]: lo: Link UP Jul 11 00:26:01.826888 systemd-networkd[738]: lo: Gained carrier Jul 11 00:26:01.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.827276 systemd-networkd[738]: Enumeration completed Jul 11 00:26:01.828258 ignition[649]: Stage: fetch-offline Jul 11 00:26:01.827356 systemd[1]: Started systemd-networkd.service. Jul 11 00:26:01.828306 ignition[649]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:26:01.827452 systemd-networkd[738]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:26:01.828315 ignition[649]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:26:01.828059 systemd[1]: Reached target network.target. Jul 11 00:26:01.828465 ignition[649]: parsed url from cmdline: "" Jul 11 00:26:01.828465 systemd-networkd[738]: eth0: Link UP Jul 11 00:26:01.828469 ignition[649]: no config URL provided Jul 11 00:26:01.828468 systemd-networkd[738]: eth0: Gained carrier Jul 11 00:26:01.828473 ignition[649]: reading system config file "/usr/lib/ignition/user.ign" Jul 11 00:26:01.829937 systemd[1]: Starting iscsiuio.service... Jul 11 00:26:01.828481 ignition[649]: no config at "/usr/lib/ignition/user.ign" Jul 11 00:26:01.828498 ignition[649]: op(1): [started] loading QEMU firmware config module Jul 11 00:26:01.828502 ignition[649]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 11 00:26:01.841312 systemd[1]: Started iscsiuio.service. Jul 11 00:26:01.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.842623 systemd[1]: Starting iscsid.service... Jul 11 00:26:01.844079 ignition[649]: op(1): [finished] loading QEMU firmware config module Jul 11 00:26:01.845348 systemd-networkd[738]: eth0: DHCPv4 address 10.0.0.54/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:26:01.846322 iscsid[745]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:26:01.846322 iscsid[745]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 11 00:26:01.846322 iscsid[745]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 11 00:26:01.846322 iscsid[745]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 11 00:26:01.846322 iscsid[745]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:26:01.846322 iscsid[745]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 11 00:26:01.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.848631 systemd[1]: Started iscsid.service. Jul 11 00:26:01.853135 systemd[1]: Starting dracut-initqueue.service... Jul 11 00:26:01.863052 systemd[1]: Finished dracut-initqueue.service. Jul 11 00:26:01.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.863903 systemd[1]: Reached target remote-fs-pre.target. Jul 11 00:26:01.865084 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:26:01.866384 systemd[1]: Reached target remote-fs.target. Jul 11 00:26:01.868294 systemd[1]: Starting dracut-pre-mount.service... Jul 11 00:26:01.875646 systemd[1]: Finished dracut-pre-mount.service. Jul 11 00:26:01.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.898537 ignition[649]: parsing config with SHA512: 149c970e5ea5317493bdc8e122cfb8acd124bad3c25f706bc57c890fa4c6eceb251338fde1e8c2692e1c7900db7c6b49ca8f0c2a18a91422550adf0ce8032900 Jul 11 00:26:01.911563 unknown[649]: fetched base config from "system" Jul 11 00:26:01.912060 ignition[649]: fetch-offline: fetch-offline passed Jul 11 00:26:01.911574 unknown[649]: fetched user config from "qemu" Jul 11 00:26:01.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.912238 ignition[649]: Ignition finished successfully Jul 11 00:26:01.912267 systemd-resolved[292]: Detected conflict on linux IN A 10.0.0.54 Jul 11 00:26:01.912276 systemd-resolved[292]: Hostname conflict, changing published hostname from 'linux' to 'linux11'. Jul 11 00:26:01.913118 systemd[1]: Finished ignition-fetch-offline.service. Jul 11 00:26:01.914239 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 11 00:26:01.914947 systemd[1]: Starting ignition-kargs.service... Jul 11 00:26:01.923533 ignition[760]: Ignition 2.14.0 Jul 11 00:26:01.923543 ignition[760]: Stage: kargs Jul 11 00:26:01.923630 ignition[760]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:26:01.923640 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:26:01.924498 ignition[760]: kargs: kargs passed Jul 11 00:26:01.926125 systemd[1]: Finished ignition-kargs.service. Jul 11 00:26:01.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.924545 ignition[760]: Ignition finished successfully Jul 11 00:26:01.927647 systemd[1]: Starting ignition-disks.service... Jul 11 00:26:01.933649 ignition[766]: Ignition 2.14.0 Jul 11 00:26:01.933666 ignition[766]: Stage: disks Jul 11 00:26:01.933745 ignition[766]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:26:01.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.936081 systemd[1]: Finished ignition-disks.service. Jul 11 00:26:01.933754 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:26:01.936792 systemd[1]: Reached target initrd-root-device.target. Jul 11 00:26:01.934789 ignition[766]: disks: disks passed Jul 11 00:26:01.937432 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:26:01.934829 ignition[766]: Ignition finished successfully Jul 11 00:26:01.938578 systemd[1]: Reached target local-fs.target. Jul 11 00:26:01.939932 systemd[1]: Reached target sysinit.target. Jul 11 00:26:01.941098 systemd[1]: Reached target basic.target. Jul 11 00:26:01.942939 systemd[1]: Starting systemd-fsck-root.service... Jul 11 00:26:01.953327 systemd-fsck[774]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 11 00:26:01.958891 systemd[1]: Finished systemd-fsck-root.service. Jul 11 00:26:01.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:01.961733 systemd[1]: Mounting sysroot.mount... Jul 11 00:26:01.968040 systemd[1]: Mounted sysroot.mount. Jul 11 00:26:01.969100 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 11 00:26:01.968789 systemd[1]: Reached target initrd-root-fs.target. Jul 11 00:26:01.970793 systemd[1]: Mounting sysroot-usr.mount... Jul 11 00:26:01.971627 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 11 00:26:01.971680 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 11 00:26:01.971704 systemd[1]: Reached target ignition-diskful.target. Jul 11 00:26:01.973328 systemd[1]: Mounted sysroot-usr.mount. Jul 11 00:26:01.974873 systemd[1]: Starting initrd-setup-root.service... Jul 11 00:26:01.978981 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Jul 11 00:26:01.983604 initrd-setup-root[792]: cut: /sysroot/etc/group: No such file or directory Jul 11 00:26:01.987350 initrd-setup-root[800]: cut: /sysroot/etc/shadow: No such file or directory Jul 11 00:26:01.990895 initrd-setup-root[808]: cut: /sysroot/etc/gshadow: No such file or directory Jul 11 00:26:02.017215 systemd[1]: Finished initrd-setup-root.service. Jul 11 00:26:02.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:02.018590 systemd[1]: Starting ignition-mount.service... Jul 11 00:26:02.019765 systemd[1]: Starting sysroot-boot.service... Jul 11 00:26:02.024228 bash[825]: umount: /sysroot/usr/share/oem: not mounted. Jul 11 00:26:02.032150 ignition[827]: INFO : Ignition 2.14.0 Jul 11 00:26:02.032150 ignition[827]: INFO : Stage: mount Jul 11 00:26:02.033327 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:26:02.033327 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:26:02.033327 ignition[827]: INFO : mount: mount passed Jul 11 00:26:02.033327 ignition[827]: INFO : Ignition finished successfully Jul 11 00:26:02.035386 systemd[1]: Finished ignition-mount.service. Jul 11 00:26:02.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:02.038417 systemd[1]: Finished sysroot-boot.service. Jul 11 00:26:02.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:02.672991 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 11 00:26:02.679313 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (835) Jul 11 00:26:02.679345 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:26:02.679355 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:26:02.680218 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:26:02.682892 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 11 00:26:02.684231 systemd[1]: Starting ignition-files.service... Jul 11 00:26:02.697590 ignition[855]: INFO : Ignition 2.14.0 Jul 11 00:26:02.697590 ignition[855]: INFO : Stage: files Jul 11 00:26:02.698737 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:26:02.698737 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:26:02.698737 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Jul 11 00:26:02.704931 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 11 00:26:02.704931 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 11 00:26:02.704931 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 11 00:26:02.704931 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 11 00:26:02.708943 unknown[855]: wrote ssh authorized keys file for user: core Jul 11 00:26:02.709799 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 11 00:26:02.709799 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 11 00:26:02.709799 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Jul 11 00:26:02.756659 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 11 00:26:02.939219 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 11 00:26:02.940771 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Jul 11 00:26:03.275567 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 11 00:26:03.492453 systemd-networkd[738]: eth0: Gained IPv6LL Jul 11 00:26:04.020889 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 11 00:26:04.020889 ignition[855]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 11 00:26:04.023688 ignition[855]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 11 00:26:04.026961 ignition[855]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:26:04.075454 ignition[855]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:26:04.076807 ignition[855]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 11 00:26:04.076807 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:26:04.076807 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:26:04.076807 ignition[855]: INFO : files: files passed Jul 11 00:26:04.076807 ignition[855]: INFO : Ignition finished successfully Jul 11 00:26:04.091567 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 11 00:26:04.091596 kernel: audit: type=1130 audit(1752193564.085:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.079652 systemd[1]: Finished ignition-files.service. Jul 11 00:26:04.086222 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 11 00:26:04.089786 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 11 00:26:04.102408 kernel: audit: type=1130 audit(1752193564.097:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.102428 kernel: audit: type=1131 audit(1752193564.097:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.102496 initrd-setup-root-after-ignition[879]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 11 00:26:04.106099 kernel: audit: type=1130 audit(1752193564.102:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.091017 systemd[1]: Starting ignition-quench.service... Jul 11 00:26:04.107934 initrd-setup-root-after-ignition[882]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 11 00:26:04.093167 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 11 00:26:04.093268 systemd[1]: Finished ignition-quench.service. Jul 11 00:26:04.101398 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 11 00:26:04.103143 systemd[1]: Reached target ignition-complete.target. Jul 11 00:26:04.107291 systemd[1]: Starting initrd-parse-etc.service... Jul 11 00:26:04.121871 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 11 00:26:04.121983 systemd[1]: Finished initrd-parse-etc.service. Jul 11 00:26:04.127732 kernel: audit: type=1130 audit(1752193564.123:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.127758 kernel: audit: type=1131 audit(1752193564.123:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.123489 systemd[1]: Reached target initrd-fs.target. Jul 11 00:26:04.128288 systemd[1]: Reached target initrd.target. Jul 11 00:26:04.129588 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 11 00:26:04.130398 systemd[1]: Starting dracut-pre-pivot.service... Jul 11 00:26:04.142391 systemd[1]: Finished dracut-pre-pivot.service. Jul 11 00:26:04.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.143826 systemd[1]: Starting initrd-cleanup.service... Jul 11 00:26:04.146467 kernel: audit: type=1130 audit(1752193564.142:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.151963 systemd[1]: Stopped target nss-lookup.target. Jul 11 00:26:04.152676 systemd[1]: Stopped target remote-cryptsetup.target. Jul 11 00:26:04.153905 systemd[1]: Stopped target timers.target. Jul 11 00:26:04.155059 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 11 00:26:04.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.155160 systemd[1]: Stopped dracut-pre-pivot.service. Jul 11 00:26:04.159892 kernel: audit: type=1131 audit(1752193564.156:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.156459 systemd[1]: Stopped target initrd.target. Jul 11 00:26:04.159344 systemd[1]: Stopped target basic.target. Jul 11 00:26:04.160426 systemd[1]: Stopped target ignition-complete.target. Jul 11 00:26:04.161657 systemd[1]: Stopped target ignition-diskful.target. Jul 11 00:26:04.162828 systemd[1]: Stopped target initrd-root-device.target. Jul 11 00:26:04.164099 systemd[1]: Stopped target remote-fs.target. Jul 11 00:26:04.165260 systemd[1]: Stopped target remote-fs-pre.target. Jul 11 00:26:04.166530 systemd[1]: Stopped target sysinit.target. Jul 11 00:26:04.167862 systemd[1]: Stopped target local-fs.target. Jul 11 00:26:04.169078 systemd[1]: Stopped target local-fs-pre.target. Jul 11 00:26:04.170429 systemd[1]: Stopped target swap.target. Jul 11 00:26:04.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.171607 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 11 00:26:04.176853 kernel: audit: type=1131 audit(1752193564.172:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.171717 systemd[1]: Stopped dracut-pre-mount.service. Jul 11 00:26:04.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.173024 systemd[1]: Stopped target cryptsetup.target. Jul 11 00:26:04.181184 kernel: audit: type=1131 audit(1752193564.177:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.176023 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 11 00:26:04.176118 systemd[1]: Stopped dracut-initqueue.service. Jul 11 00:26:04.177508 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 11 00:26:04.177597 systemd[1]: Stopped ignition-fetch-offline.service. Jul 11 00:26:04.180657 systemd[1]: Stopped target paths.target. Jul 11 00:26:04.181804 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 11 00:26:04.185232 systemd[1]: Stopped systemd-ask-password-console.path. Jul 11 00:26:04.186002 systemd[1]: Stopped target slices.target. Jul 11 00:26:04.187076 systemd[1]: Stopped target sockets.target. Jul 11 00:26:04.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.188556 systemd[1]: iscsid.socket: Deactivated successfully. Jul 11 00:26:04.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.188624 systemd[1]: Closed iscsid.socket. Jul 11 00:26:04.189772 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 11 00:26:04.189867 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 11 00:26:04.191051 systemd[1]: ignition-files.service: Deactivated successfully. Jul 11 00:26:04.191134 systemd[1]: Stopped ignition-files.service. Jul 11 00:26:04.192988 systemd[1]: Stopping ignition-mount.service... Jul 11 00:26:04.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.199601 ignition[895]: INFO : Ignition 2.14.0 Jul 11 00:26:04.199601 ignition[895]: INFO : Stage: umount Jul 11 00:26:04.199601 ignition[895]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:26:04.199601 ignition[895]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:26:04.193987 systemd[1]: Stopping iscsiuio.service... Jul 11 00:26:04.205861 ignition[895]: INFO : umount: umount passed Jul 11 00:26:04.205861 ignition[895]: INFO : Ignition finished successfully Jul 11 00:26:04.197790 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 11 00:26:04.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.197910 systemd[1]: Stopped kmod-static-nodes.service. Jul 11 00:26:04.199746 systemd[1]: Stopping sysroot-boot.service... Jul 11 00:26:04.201761 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 11 00:26:04.201888 systemd[1]: Stopped systemd-udev-trigger.service. Jul 11 00:26:04.203393 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 11 00:26:04.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.203482 systemd[1]: Stopped dracut-pre-trigger.service. Jul 11 00:26:04.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.207243 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 11 00:26:04.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.207330 systemd[1]: Stopped iscsiuio.service. Jul 11 00:26:04.209534 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 11 00:26:04.210061 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 11 00:26:04.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.210136 systemd[1]: Stopped ignition-mount.service. Jul 11 00:26:04.211438 systemd[1]: Stopped target network.target. Jul 11 00:26:04.212498 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 11 00:26:04.212531 systemd[1]: Closed iscsiuio.socket. Jul 11 00:26:04.214008 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 11 00:26:04.214053 systemd[1]: Stopped ignition-disks.service. Jul 11 00:26:04.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.215436 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 11 00:26:04.215477 systemd[1]: Stopped ignition-kargs.service. Jul 11 00:26:04.217052 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 11 00:26:04.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.217090 systemd[1]: Stopped ignition-setup.service. Jul 11 00:26:04.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.218464 systemd[1]: Stopping systemd-networkd.service... Jul 11 00:26:04.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.219987 systemd[1]: Stopping systemd-resolved.service... Jul 11 00:26:04.221352 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 11 00:26:04.221431 systemd[1]: Finished initrd-cleanup.service. Jul 11 00:26:04.225248 systemd-networkd[738]: eth0: DHCPv6 lease lost Jul 11 00:26:04.226905 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 11 00:26:04.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.226994 systemd[1]: Stopped systemd-networkd.service. Jul 11 00:26:04.229116 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 11 00:26:04.229141 systemd[1]: Closed systemd-networkd.socket. Jul 11 00:26:04.247000 audit: BPF prog-id=9 op=UNLOAD Jul 11 00:26:04.230942 systemd[1]: Stopping network-cleanup.service... Jul 11 00:26:04.231751 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 11 00:26:04.248000 audit: BPF prog-id=6 op=UNLOAD Jul 11 00:26:04.231809 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 11 00:26:04.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.233281 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 11 00:26:04.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.233323 systemd[1]: Stopped systemd-sysctl.service. Jul 11 00:26:04.235921 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 11 00:26:04.235966 systemd[1]: Stopped systemd-modules-load.service. Jul 11 00:26:04.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.236963 systemd[1]: Stopping systemd-udevd.service... Jul 11 00:26:04.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.242433 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 11 00:26:04.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.242906 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 11 00:26:04.242988 systemd[1]: Stopped systemd-resolved.service. Jul 11 00:26:04.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.248533 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 11 00:26:04.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.248626 systemd[1]: Stopped network-cleanup.service. Jul 11 00:26:04.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.249802 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 11 00:26:04.249909 systemd[1]: Stopped systemd-udevd.service. Jul 11 00:26:04.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.250856 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 11 00:26:04.250889 systemd[1]: Closed systemd-udevd-control.socket. Jul 11 00:26:04.251799 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 11 00:26:04.251829 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 11 00:26:04.253914 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 11 00:26:04.254088 systemd[1]: Stopped dracut-pre-udev.service. Jul 11 00:26:04.255622 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 11 00:26:04.255669 systemd[1]: Stopped dracut-cmdline.service. Jul 11 00:26:04.257139 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 11 00:26:04.257174 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 11 00:26:04.258904 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 11 00:26:04.259566 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 11 00:26:04.259616 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 11 00:26:04.261176 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 11 00:26:04.261279 systemd[1]: Stopped sysroot-boot.service. Jul 11 00:26:04.261930 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 11 00:26:04.261969 systemd[1]: Stopped initrd-setup-root.service. Jul 11 00:26:04.263696 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 11 00:26:04.263768 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 11 00:26:04.264817 systemd[1]: Reached target initrd-switch-root.target. Jul 11 00:26:04.266067 systemd[1]: Starting initrd-switch-root.service... Jul 11 00:26:04.272101 systemd[1]: Switching root. Jul 11 00:26:04.297501 iscsid[745]: iscsid shutting down. Jul 11 00:26:04.298026 systemd-journald[290]: Journal stopped Jul 11 00:26:06.299863 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Jul 11 00:26:06.299925 kernel: SELinux: Class mctp_socket not defined in policy. Jul 11 00:26:06.299942 kernel: SELinux: Class anon_inode not defined in policy. Jul 11 00:26:06.299953 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 11 00:26:06.299964 kernel: SELinux: policy capability network_peer_controls=1 Jul 11 00:26:06.299974 kernel: SELinux: policy capability open_perms=1 Jul 11 00:26:06.299984 kernel: SELinux: policy capability extended_socket_class=1 Jul 11 00:26:06.299993 kernel: SELinux: policy capability always_check_network=0 Jul 11 00:26:06.300005 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 11 00:26:06.300015 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 11 00:26:06.300031 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 11 00:26:06.300041 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 11 00:26:06.300051 systemd[1]: Successfully loaded SELinux policy in 33.860ms. Jul 11 00:26:06.300066 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.374ms. Jul 11 00:26:06.300078 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:26:06.300089 systemd[1]: Detected virtualization kvm. Jul 11 00:26:06.300100 systemd[1]: Detected architecture arm64. Jul 11 00:26:06.300111 systemd[1]: Detected first boot. Jul 11 00:26:06.300121 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:26:06.300131 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 11 00:26:06.300141 systemd[1]: Populated /etc with preset unit settings. Jul 11 00:26:06.300152 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:26:06.300163 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:26:06.300175 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:26:06.300187 systemd[1]: iscsid.service: Deactivated successfully. Jul 11 00:26:06.300198 systemd[1]: Stopped iscsid.service. Jul 11 00:26:06.300258 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 11 00:26:06.300269 systemd[1]: Stopped initrd-switch-root.service. Jul 11 00:26:06.300281 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 11 00:26:06.300291 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 11 00:26:06.300302 systemd[1]: Created slice system-addon\x2drun.slice. Jul 11 00:26:06.300312 systemd[1]: Created slice system-getty.slice. Jul 11 00:26:06.300322 systemd[1]: Created slice system-modprobe.slice. Jul 11 00:26:06.300333 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 11 00:26:06.300343 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 11 00:26:06.300354 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 11 00:26:06.300364 systemd[1]: Created slice user.slice. Jul 11 00:26:06.300376 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:26:06.300387 systemd[1]: Started systemd-ask-password-wall.path. Jul 11 00:26:06.300398 systemd[1]: Set up automount boot.automount. Jul 11 00:26:06.300408 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 11 00:26:06.300418 systemd[1]: Stopped target initrd-switch-root.target. Jul 11 00:26:06.300429 systemd[1]: Stopped target initrd-fs.target. Jul 11 00:26:06.300439 systemd[1]: Stopped target initrd-root-fs.target. Jul 11 00:26:06.300450 systemd[1]: Reached target integritysetup.target. Jul 11 00:26:06.300461 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:26:06.300472 systemd[1]: Reached target remote-fs.target. Jul 11 00:26:06.300483 systemd[1]: Reached target slices.target. Jul 11 00:26:06.300493 systemd[1]: Reached target swap.target. Jul 11 00:26:06.300504 systemd[1]: Reached target torcx.target. Jul 11 00:26:06.300514 systemd[1]: Reached target veritysetup.target. Jul 11 00:26:06.300524 systemd[1]: Listening on systemd-coredump.socket. Jul 11 00:26:06.300534 systemd[1]: Listening on systemd-initctl.socket. Jul 11 00:26:06.300544 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:26:06.300556 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:26:06.300567 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:26:06.300577 systemd[1]: Listening on systemd-userdbd.socket. Jul 11 00:26:06.300588 systemd[1]: Mounting dev-hugepages.mount... Jul 11 00:26:06.300598 systemd[1]: Mounting dev-mqueue.mount... Jul 11 00:26:06.300608 systemd[1]: Mounting media.mount... Jul 11 00:26:06.300625 systemd[1]: Mounting sys-kernel-debug.mount... Jul 11 00:26:06.300636 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 11 00:26:06.300647 systemd[1]: Mounting tmp.mount... Jul 11 00:26:06.300658 systemd[1]: Starting flatcar-tmpfiles.service... Jul 11 00:26:06.300669 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:26:06.300680 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:26:06.300690 systemd[1]: Starting modprobe@configfs.service... Jul 11 00:26:06.300701 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:26:06.300712 systemd[1]: Starting modprobe@drm.service... Jul 11 00:26:06.300722 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:26:06.300732 systemd[1]: Starting modprobe@fuse.service... Jul 11 00:26:06.300743 systemd[1]: Starting modprobe@loop.service... Jul 11 00:26:06.300755 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 11 00:26:06.300766 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 11 00:26:06.300778 systemd[1]: Stopped systemd-fsck-root.service. Jul 11 00:26:06.300789 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 11 00:26:06.300799 systemd[1]: Stopped systemd-fsck-usr.service. Jul 11 00:26:06.300809 systemd[1]: Stopped systemd-journald.service. Jul 11 00:26:06.300820 systemd[1]: Starting systemd-journald.service... Jul 11 00:26:06.300830 kernel: loop: module loaded Jul 11 00:26:06.300842 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:26:06.300853 kernel: fuse: init (API version 7.34) Jul 11 00:26:06.300863 systemd[1]: Starting systemd-network-generator.service... Jul 11 00:26:06.300874 systemd[1]: Starting systemd-remount-fs.service... Jul 11 00:26:06.300885 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:26:06.300896 systemd[1]: verity-setup.service: Deactivated successfully. Jul 11 00:26:06.300906 systemd[1]: Stopped verity-setup.service. Jul 11 00:26:06.300917 systemd[1]: Mounted dev-hugepages.mount. Jul 11 00:26:06.300927 systemd[1]: Mounted dev-mqueue.mount. Jul 11 00:26:06.300937 systemd[1]: Mounted media.mount. Jul 11 00:26:06.300947 systemd[1]: Mounted sys-kernel-debug.mount. Jul 11 00:26:06.300958 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 11 00:26:06.300968 systemd[1]: Mounted tmp.mount. Jul 11 00:26:06.300981 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:26:06.300992 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 11 00:26:06.301003 systemd[1]: Finished modprobe@configfs.service. Jul 11 00:26:06.301014 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:26:06.301025 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:26:06.301036 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:26:06.301046 systemd[1]: Finished modprobe@drm.service. Jul 11 00:26:06.301057 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:26:06.301067 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:26:06.301077 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 11 00:26:06.301088 systemd[1]: Finished modprobe@fuse.service. Jul 11 00:26:06.301098 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:26:06.301108 systemd[1]: Finished modprobe@loop.service. Jul 11 00:26:06.301118 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:26:06.301135 systemd-journald[988]: Journal started Jul 11 00:26:06.301193 systemd-journald[988]: Runtime Journal (/run/log/journal/297efe7cf07b417ba56750e678aa827b) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:26:04.363000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 11 00:26:04.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:26:04.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:26:04.437000 audit: BPF prog-id=10 op=LOAD Jul 11 00:26:04.437000 audit: BPF prog-id=10 op=UNLOAD Jul 11 00:26:04.437000 audit: BPF prog-id=11 op=LOAD Jul 11 00:26:04.437000 audit: BPF prog-id=11 op=UNLOAD Jul 11 00:26:04.478000 audit[927]: AVC avc: denied { associate } for pid=927 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 11 00:26:04.478000 audit[927]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd89c a1=40000d0de0 a2=40000d70c0 a3=32 items=0 ppid=910 pid=927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:04.478000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:26:04.478000 audit[927]: AVC avc: denied { associate } for pid=927 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 11 00:26:04.478000 audit[927]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001cd975 a2=1ed a3=0 items=2 ppid=910 pid=927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:04.478000 audit: CWD cwd="/" Jul 11 00:26:04.478000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:26:04.478000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:26:04.478000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:26:06.147000 audit: BPF prog-id=12 op=LOAD Jul 11 00:26:06.147000 audit: BPF prog-id=3 op=UNLOAD Jul 11 00:26:06.148000 audit: BPF prog-id=13 op=LOAD Jul 11 00:26:06.148000 audit: BPF prog-id=14 op=LOAD Jul 11 00:26:06.148000 audit: BPF prog-id=4 op=UNLOAD Jul 11 00:26:06.148000 audit: BPF prog-id=5 op=UNLOAD Jul 11 00:26:06.148000 audit: BPF prog-id=15 op=LOAD Jul 11 00:26:06.148000 audit: BPF prog-id=12 op=UNLOAD Jul 11 00:26:06.148000 audit: BPF prog-id=16 op=LOAD Jul 11 00:26:06.148000 audit: BPF prog-id=17 op=LOAD Jul 11 00:26:06.148000 audit: BPF prog-id=13 op=UNLOAD Jul 11 00:26:06.148000 audit: BPF prog-id=14 op=UNLOAD Jul 11 00:26:06.149000 audit: BPF prog-id=18 op=LOAD Jul 11 00:26:06.149000 audit: BPF prog-id=15 op=UNLOAD Jul 11 00:26:06.149000 audit: BPF prog-id=19 op=LOAD Jul 11 00:26:06.149000 audit: BPF prog-id=20 op=LOAD Jul 11 00:26:06.149000 audit: BPF prog-id=16 op=UNLOAD Jul 11 00:26:06.149000 audit: BPF prog-id=17 op=UNLOAD Jul 11 00:26:06.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.161000 audit: BPF prog-id=18 op=UNLOAD Jul 11 00:26:06.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.247000 audit: BPF prog-id=21 op=LOAD Jul 11 00:26:06.248000 audit: BPF prog-id=22 op=LOAD Jul 11 00:26:06.248000 audit: BPF prog-id=23 op=LOAD Jul 11 00:26:06.248000 audit: BPF prog-id=19 op=UNLOAD Jul 11 00:26:06.248000 audit: BPF prog-id=20 op=UNLOAD Jul 11 00:26:06.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.302926 systemd[1]: Finished systemd-network-generator.service. Jul 11 00:26:06.302970 systemd[1]: Started systemd-journald.service. Jul 11 00:26:06.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.295000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 11 00:26:06.295000 audit[988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffede3b100 a2=4000 a3=1 items=0 ppid=1 pid=988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:06.295000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 11 00:26:06.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.146066 systemd[1]: Queued start job for default target multi-user.target. Jul 11 00:26:04.476653 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:26:06.146079 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 11 00:26:04.476911 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:26:06.149977 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 11 00:26:04.476929 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:26:04.476957 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 11 00:26:04.476966 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 11 00:26:06.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:04.476992 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 11 00:26:04.477003 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 11 00:26:04.477185 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 11 00:26:06.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.304463 systemd[1]: Finished systemd-remount-fs.service. Jul 11 00:26:04.477233 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:26:04.477245 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:26:04.477859 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 11 00:26:04.477889 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 11 00:26:04.477907 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 11 00:26:06.305692 systemd[1]: Reached target network-pre.target. Jul 11 00:26:04.477920 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 11 00:26:04.477936 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 11 00:26:04.477949 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:04Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 11 00:26:05.896116 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:05Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:26:05.896488 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:05Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:26:05.896596 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:05Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:26:05.896779 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:05Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:26:05.896838 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:05Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 11 00:26:05.896898 /usr/lib/systemd/system-generators/torcx-generator[927]: time="2025-07-11T00:26:05Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 11 00:26:06.307680 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 11 00:26:06.309497 systemd[1]: Mounting sys-kernel-config.mount... Jul 11 00:26:06.310144 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 11 00:26:06.311705 systemd[1]: Starting systemd-hwdb-update.service... Jul 11 00:26:06.313632 systemd[1]: Starting systemd-journal-flush.service... Jul 11 00:26:06.314280 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:26:06.315336 systemd[1]: Starting systemd-random-seed.service... Jul 11 00:26:06.316037 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:26:06.317095 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:26:06.320589 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 11 00:26:06.323157 systemd-journald[988]: Time spent on flushing to /var/log/journal/297efe7cf07b417ba56750e678aa827b is 14.565ms for 996 entries. Jul 11 00:26:06.323157 systemd-journald[988]: System Journal (/var/log/journal/297efe7cf07b417ba56750e678aa827b) is 8.0M, max 195.6M, 187.6M free. Jul 11 00:26:06.344793 systemd-journald[988]: Received client request to flush runtime journal. Jul 11 00:26:06.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.322608 systemd[1]: Mounted sys-kernel-config.mount. Jul 11 00:26:06.327351 systemd[1]: Finished flatcar-tmpfiles.service. Jul 11 00:26:06.329330 systemd[1]: Starting systemd-sysusers.service... Jul 11 00:26:06.330321 systemd[1]: Finished systemd-random-seed.service. Jul 11 00:26:06.332573 systemd[1]: Reached target first-boot-complete.target. Jul 11 00:26:06.342046 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:26:06.344304 systemd[1]: Starting systemd-udev-settle.service... Jul 11 00:26:06.346047 systemd[1]: Finished systemd-journal-flush.service. Jul 11 00:26:06.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.347287 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:26:06.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.352167 udevadm[1028]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 11 00:26:06.353816 systemd[1]: Finished systemd-sysusers.service. Jul 11 00:26:06.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.710890 systemd[1]: Finished systemd-hwdb-update.service. Jul 11 00:26:06.713055 systemd[1]: Starting systemd-udevd.service... Jul 11 00:26:06.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.712000 audit: BPF prog-id=24 op=LOAD Jul 11 00:26:06.712000 audit: BPF prog-id=25 op=LOAD Jul 11 00:26:06.712000 audit: BPF prog-id=7 op=UNLOAD Jul 11 00:26:06.712000 audit: BPF prog-id=8 op=UNLOAD Jul 11 00:26:06.730713 systemd-udevd[1030]: Using default interface naming scheme 'v252'. Jul 11 00:26:06.743776 systemd[1]: Started systemd-udevd.service. Jul 11 00:26:06.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.751000 audit: BPF prog-id=26 op=LOAD Jul 11 00:26:06.752450 systemd[1]: Starting systemd-networkd.service... Jul 11 00:26:06.757000 audit: BPF prog-id=27 op=LOAD Jul 11 00:26:06.757000 audit: BPF prog-id=28 op=LOAD Jul 11 00:26:06.757000 audit: BPF prog-id=29 op=LOAD Jul 11 00:26:06.758453 systemd[1]: Starting systemd-userdbd.service... Jul 11 00:26:06.769265 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 11 00:26:06.790858 systemd[1]: Started systemd-userdbd.service. Jul 11 00:26:06.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.807124 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:26:06.849649 systemd-networkd[1050]: lo: Link UP Jul 11 00:26:06.849659 systemd-networkd[1050]: lo: Gained carrier Jul 11 00:26:06.850006 systemd-networkd[1050]: Enumeration completed Jul 11 00:26:06.850104 systemd[1]: Started systemd-networkd.service. Jul 11 00:26:06.850112 systemd-networkd[1050]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:26:06.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.851207 systemd-networkd[1050]: eth0: Link UP Jul 11 00:26:06.851216 systemd-networkd[1050]: eth0: Gained carrier Jul 11 00:26:06.865371 systemd-networkd[1050]: eth0: DHCPv4 address 10.0.0.54/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:26:06.865573 systemd[1]: Finished systemd-udev-settle.service. Jul 11 00:26:06.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.867466 systemd[1]: Starting lvm2-activation-early.service... Jul 11 00:26:06.879645 lvm[1063]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:26:06.904080 systemd[1]: Finished lvm2-activation-early.service. Jul 11 00:26:06.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.904941 systemd[1]: Reached target cryptsetup.target. Jul 11 00:26:06.906734 systemd[1]: Starting lvm2-activation.service... Jul 11 00:26:06.910405 lvm[1064]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:26:06.938156 systemd[1]: Finished lvm2-activation.service. Jul 11 00:26:06.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.939023 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:26:06.939700 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 11 00:26:06.939729 systemd[1]: Reached target local-fs.target. Jul 11 00:26:06.940296 systemd[1]: Reached target machines.target. Jul 11 00:26:06.942069 systemd[1]: Starting ldconfig.service... Jul 11 00:26:06.942986 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:26:06.943040 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:06.944099 systemd[1]: Starting systemd-boot-update.service... Jul 11 00:26:06.945939 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 11 00:26:06.947940 systemd[1]: Starting systemd-machine-id-commit.service... Jul 11 00:26:06.949756 systemd[1]: Starting systemd-sysext.service... Jul 11 00:26:06.956742 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1066 (bootctl) Jul 11 00:26:06.958703 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 11 00:26:06.965696 systemd[1]: Unmounting usr-share-oem.mount... Jul 11 00:26:06.967777 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 11 00:26:06.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:06.972579 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 11 00:26:06.972808 systemd[1]: Unmounted usr-share-oem.mount. Jul 11 00:26:07.022280 kernel: loop0: detected capacity change from 0 to 207008 Jul 11 00:26:07.022931 systemd[1]: Finished systemd-machine-id-commit.service. Jul 11 00:26:07.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.033223 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 11 00:26:07.036265 systemd-fsck[1075]: fsck.fat 4.2 (2021-01-31) Jul 11 00:26:07.036265 systemd-fsck[1075]: /dev/vda1: 236 files, 117310/258078 clusters Jul 11 00:26:07.038140 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 11 00:26:07.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.049226 kernel: loop1: detected capacity change from 0 to 207008 Jul 11 00:26:07.053381 (sd-sysext)[1080]: Using extensions 'kubernetes'. Jul 11 00:26:07.053991 (sd-sysext)[1080]: Merged extensions into '/usr'. Jul 11 00:26:07.073911 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.075955 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:26:07.078441 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:26:07.080577 systemd[1]: Starting modprobe@loop.service... Jul 11 00:26:07.081571 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.081719 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:07.082755 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:26:07.082960 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:26:07.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.084595 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:26:07.084730 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:26:07.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.086273 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:26:07.086394 systemd[1]: Finished modprobe@loop.service. Jul 11 00:26:07.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.088040 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:26:07.088252 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.137995 ldconfig[1065]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 11 00:26:07.140877 systemd[1]: Finished ldconfig.service. Jul 11 00:26:07.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.273288 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 11 00:26:07.275328 systemd[1]: Mounting boot.mount... Jul 11 00:26:07.277416 systemd[1]: Mounting usr-share-oem.mount... Jul 11 00:26:07.283660 systemd[1]: Mounted boot.mount. Jul 11 00:26:07.284571 systemd[1]: Mounted usr-share-oem.mount. Jul 11 00:26:07.286627 systemd[1]: Finished systemd-sysext.service. Jul 11 00:26:07.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.289790 systemd[1]: Starting ensure-sysext.service... Jul 11 00:26:07.291741 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 11 00:26:07.295588 systemd[1]: Finished systemd-boot-update.service. Jul 11 00:26:07.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.298084 systemd[1]: Reloading. Jul 11 00:26:07.314598 systemd-tmpfiles[1088]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 11 00:26:07.320185 systemd-tmpfiles[1088]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 11 00:26:07.323554 systemd-tmpfiles[1088]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 11 00:26:07.334671 /usr/lib/systemd/system-generators/torcx-generator[1108]: time="2025-07-11T00:26:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:26:07.334701 /usr/lib/systemd/system-generators/torcx-generator[1108]: time="2025-07-11T00:26:07Z" level=info msg="torcx already run" Jul 11 00:26:07.397070 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:26:07.397093 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:26:07.414447 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:26:07.458000 audit: BPF prog-id=30 op=LOAD Jul 11 00:26:07.458000 audit: BPF prog-id=31 op=LOAD Jul 11 00:26:07.458000 audit: BPF prog-id=24 op=UNLOAD Jul 11 00:26:07.458000 audit: BPF prog-id=25 op=UNLOAD Jul 11 00:26:07.460000 audit: BPF prog-id=32 op=LOAD Jul 11 00:26:07.460000 audit: BPF prog-id=21 op=UNLOAD Jul 11 00:26:07.460000 audit: BPF prog-id=33 op=LOAD Jul 11 00:26:07.460000 audit: BPF prog-id=34 op=LOAD Jul 11 00:26:07.460000 audit: BPF prog-id=22 op=UNLOAD Jul 11 00:26:07.460000 audit: BPF prog-id=23 op=UNLOAD Jul 11 00:26:07.461000 audit: BPF prog-id=35 op=LOAD Jul 11 00:26:07.461000 audit: BPF prog-id=26 op=UNLOAD Jul 11 00:26:07.462000 audit: BPF prog-id=36 op=LOAD Jul 11 00:26:07.462000 audit: BPF prog-id=27 op=UNLOAD Jul 11 00:26:07.462000 audit: BPF prog-id=37 op=LOAD Jul 11 00:26:07.462000 audit: BPF prog-id=38 op=LOAD Jul 11 00:26:07.462000 audit: BPF prog-id=28 op=UNLOAD Jul 11 00:26:07.462000 audit: BPF prog-id=29 op=UNLOAD Jul 11 00:26:07.464176 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 11 00:26:07.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.468632 systemd[1]: Starting audit-rules.service... Jul 11 00:26:07.470487 systemd[1]: Starting clean-ca-certificates.service... Jul 11 00:26:07.472762 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 11 00:26:07.478000 audit: BPF prog-id=39 op=LOAD Jul 11 00:26:07.480095 systemd[1]: Starting systemd-resolved.service... Jul 11 00:26:07.481000 audit: BPF prog-id=40 op=LOAD Jul 11 00:26:07.482833 systemd[1]: Starting systemd-timesyncd.service... Jul 11 00:26:07.484959 systemd[1]: Starting systemd-update-utmp.service... Jul 11 00:26:07.490000 audit[1158]: SYSTEM_BOOT pid=1158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.490026 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.491474 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:26:07.494101 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:26:07.495939 systemd[1]: Starting modprobe@loop.service... Jul 11 00:26:07.496559 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.496701 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:07.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.497717 systemd[1]: Finished clean-ca-certificates.service. Jul 11 00:26:07.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.498835 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 11 00:26:07.499989 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:26:07.500114 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:26:07.501187 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:26:07.501324 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:26:07.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.502352 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:26:07.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.502463 systemd[1]: Finished modprobe@loop.service. Jul 11 00:26:07.506144 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.507658 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:26:07.509642 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:26:07.511470 systemd[1]: Starting modprobe@loop.service... Jul 11 00:26:07.512072 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.512323 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:07.513741 systemd[1]: Starting systemd-update-done.service... Jul 11 00:26:07.514508 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:26:07.515855 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:26:07.516010 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:26:07.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.517254 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:26:07.517367 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:26:07.518546 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:26:07.518670 systemd[1]: Finished modprobe@loop.service. Jul 11 00:26:07.523519 systemd[1]: Finished systemd-update-utmp.service. Jul 11 00:26:07.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.524952 systemd[1]: Finished systemd-update-done.service. Jul 11 00:26:07.527392 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.529457 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:26:07.531597 systemd[1]: Starting modprobe@drm.service... Jul 11 00:26:07.533574 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:26:07.535875 systemd[1]: Starting modprobe@loop.service... Jul 11 00:26:07.536751 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.536903 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:07.538380 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 11 00:26:07.539505 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:26:07.540652 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:26:07.540780 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:26:07.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.543020 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:26:07.543143 systemd[1]: Finished modprobe@drm.service. Jul 11 00:26:07.544523 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:26:07.544662 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:26:07.545889 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:26:07.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.546005 systemd[1]: Finished modprobe@loop.service. Jul 11 00:26:07.547486 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:26:07.547556 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.548945 systemd[1]: Finished ensure-sysext.service. Jul 11 00:26:07.550164 augenrules[1176]: No rules Jul 11 00:26:07.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:07.547000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 11 00:26:07.547000 audit[1176]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc649dd50 a2=420 a3=0 items=0 ppid=1147 pid=1176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:07.547000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 11 00:26:07.551139 systemd[1]: Finished audit-rules.service. Jul 11 00:26:07.554899 systemd[1]: Started systemd-timesyncd.service. Jul 11 00:26:07.556009 systemd[1]: Reached target time-set.target. Jul 11 00:26:07.556169 systemd-timesyncd[1157]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 11 00:26:07.556488 systemd-timesyncd[1157]: Initial clock synchronization to Fri 2025-07-11 00:26:07.300909 UTC. Jul 11 00:26:07.560659 systemd-resolved[1152]: Positive Trust Anchors: Jul 11 00:26:07.560670 systemd-resolved[1152]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:26:07.560698 systemd-resolved[1152]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:26:07.583014 systemd-resolved[1152]: Defaulting to hostname 'linux'. Jul 11 00:26:07.584559 systemd[1]: Started systemd-resolved.service. Jul 11 00:26:07.585264 systemd[1]: Reached target network.target. Jul 11 00:26:07.585837 systemd[1]: Reached target nss-lookup.target. Jul 11 00:26:07.586422 systemd[1]: Reached target sysinit.target. Jul 11 00:26:07.587061 systemd[1]: Started motdgen.path. Jul 11 00:26:07.587632 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 11 00:26:07.588569 systemd[1]: Started logrotate.timer. Jul 11 00:26:07.589198 systemd[1]: Started mdadm.timer. Jul 11 00:26:07.589719 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 11 00:26:07.590339 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 11 00:26:07.590375 systemd[1]: Reached target paths.target. Jul 11 00:26:07.590914 systemd[1]: Reached target timers.target. Jul 11 00:26:07.591811 systemd[1]: Listening on dbus.socket. Jul 11 00:26:07.593508 systemd[1]: Starting docker.socket... Jul 11 00:26:07.597043 systemd[1]: Listening on sshd.socket. Jul 11 00:26:07.597782 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:07.598556 systemd[1]: Listening on docker.socket. Jul 11 00:26:07.599219 systemd[1]: Reached target sockets.target. Jul 11 00:26:07.599788 systemd[1]: Reached target basic.target. Jul 11 00:26:07.600413 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.600449 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:26:07.601570 systemd[1]: Starting containerd.service... Jul 11 00:26:07.603432 systemd[1]: Starting dbus.service... Jul 11 00:26:07.605024 systemd[1]: Starting enable-oem-cloudinit.service... Jul 11 00:26:07.606983 systemd[1]: Starting extend-filesystems.service... Jul 11 00:26:07.607823 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 11 00:26:07.609095 systemd[1]: Starting motdgen.service... Jul 11 00:26:07.612077 systemd[1]: Starting prepare-helm.service... Jul 11 00:26:07.613850 jq[1190]: false Jul 11 00:26:07.613838 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 11 00:26:07.615775 systemd[1]: Starting sshd-keygen.service... Jul 11 00:26:07.620493 systemd[1]: Starting systemd-logind.service... Jul 11 00:26:07.621332 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:26:07.621403 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 11 00:26:07.621825 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 11 00:26:07.622492 systemd[1]: Starting update-engine.service... Jul 11 00:26:07.627099 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 11 00:26:07.630712 jq[1209]: true Jul 11 00:26:07.630022 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 11 00:26:07.633286 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 11 00:26:07.638965 extend-filesystems[1191]: Found loop1 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda1 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda2 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda3 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found usr Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda4 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda6 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda7 Jul 11 00:26:07.638965 extend-filesystems[1191]: Found vda9 Jul 11 00:26:07.638965 extend-filesystems[1191]: Checking size of /dev/vda9 Jul 11 00:26:07.633798 systemd[1]: motdgen.service: Deactivated successfully. Jul 11 00:26:07.633969 systemd[1]: Finished motdgen.service. Jul 11 00:26:07.635754 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 11 00:26:07.635925 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 11 00:26:07.655068 jq[1212]: true Jul 11 00:26:07.655762 tar[1211]: linux-arm64/LICENSE Jul 11 00:26:07.655959 tar[1211]: linux-arm64/helm Jul 11 00:26:07.664732 dbus-daemon[1189]: [system] SELinux support is enabled Jul 11 00:26:07.664880 systemd[1]: Started dbus.service. Jul 11 00:26:07.665879 extend-filesystems[1191]: Resized partition /dev/vda9 Jul 11 00:26:07.667415 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 11 00:26:07.667443 systemd[1]: Reached target system-config.target. Jul 11 00:26:07.668323 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 11 00:26:07.668353 systemd[1]: Reached target user-config.target. Jul 11 00:26:07.680406 extend-filesystems[1227]: resize2fs 1.46.5 (30-Dec-2021) Jul 11 00:26:07.695561 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 11 00:26:07.701740 systemd-logind[1202]: Watching system buttons on /dev/input/event0 (Power Button) Jul 11 00:26:07.702940 systemd-logind[1202]: New seat seat0. Jul 11 00:26:07.712993 systemd[1]: Started systemd-logind.service. Jul 11 00:26:07.749537 update_engine[1205]: I0711 00:26:07.749184 1205 main.cc:92] Flatcar Update Engine starting Jul 11 00:26:07.754234 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 11 00:26:07.754187 systemd[1]: Started update-engine.service. Jul 11 00:26:07.757180 systemd[1]: Started locksmithd.service. Jul 11 00:26:07.771093 update_engine[1205]: I0711 00:26:07.754383 1205 update_check_scheduler.cc:74] Next update check in 12m0s Jul 11 00:26:07.771347 extend-filesystems[1227]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 11 00:26:07.771347 extend-filesystems[1227]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 11 00:26:07.771347 extend-filesystems[1227]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 11 00:26:07.775481 extend-filesystems[1191]: Resized filesystem in /dev/vda9 Jul 11 00:26:07.776075 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 11 00:26:07.776251 systemd[1]: Finished extend-filesystems.service. Jul 11 00:26:07.778934 bash[1239]: Updated "/home/core/.ssh/authorized_keys" Jul 11 00:26:07.779648 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 11 00:26:07.784230 env[1213]: time="2025-07-11T00:26:07.781919120Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 11 00:26:07.801779 env[1213]: time="2025-07-11T00:26:07.801733240Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 11 00:26:07.802006 env[1213]: time="2025-07-11T00:26:07.801981280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807365 env[1213]: time="2025-07-11T00:26:07.807328160Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807365 env[1213]: time="2025-07-11T00:26:07.807363160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807617 env[1213]: time="2025-07-11T00:26:07.807585640Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807664 env[1213]: time="2025-07-11T00:26:07.807618520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807664 env[1213]: time="2025-07-11T00:26:07.807634200Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 11 00:26:07.807664 env[1213]: time="2025-07-11T00:26:07.807644400Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807736 env[1213]: time="2025-07-11T00:26:07.807716000Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:26:07.807946 env[1213]: time="2025-07-11T00:26:07.807926920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:26:07.808081 env[1213]: time="2025-07-11T00:26:07.808061840Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:26:07.808113 env[1213]: time="2025-07-11T00:26:07.808083840Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 11 00:26:07.808152 env[1213]: time="2025-07-11T00:26:07.808137440Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 11 00:26:07.808185 env[1213]: time="2025-07-11T00:26:07.808152560Z" level=info msg="metadata content store policy set" policy=shared Jul 11 00:26:07.822498 env[1213]: time="2025-07-11T00:26:07.822462080Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 11 00:26:07.822577 env[1213]: time="2025-07-11T00:26:07.822504360Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 11 00:26:07.822577 env[1213]: time="2025-07-11T00:26:07.822520400Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 11 00:26:07.822577 env[1213]: time="2025-07-11T00:26:07.822555360Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.822577 env[1213]: time="2025-07-11T00:26:07.822570200Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.822659 env[1213]: time="2025-07-11T00:26:07.822586440Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.822659 env[1213]: time="2025-07-11T00:26:07.822607600Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.822967 env[1213]: time="2025-07-11T00:26:07.822947800Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.822993 env[1213]: time="2025-07-11T00:26:07.822971000Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.822993 env[1213]: time="2025-07-11T00:26:07.822985240Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.823029 env[1213]: time="2025-07-11T00:26:07.822999040Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.823029 env[1213]: time="2025-07-11T00:26:07.823020840Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 11 00:26:07.823171 env[1213]: time="2025-07-11T00:26:07.823154800Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 11 00:26:07.823279 env[1213]: time="2025-07-11T00:26:07.823261160Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 11 00:26:07.823484 env[1213]: time="2025-07-11T00:26:07.823464680Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 11 00:26:07.823518 env[1213]: time="2025-07-11T00:26:07.823492160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823518 env[1213]: time="2025-07-11T00:26:07.823506880Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 11 00:26:07.823638 env[1213]: time="2025-07-11T00:26:07.823621120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823672 env[1213]: time="2025-07-11T00:26:07.823640080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823672 env[1213]: time="2025-07-11T00:26:07.823653320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823672 env[1213]: time="2025-07-11T00:26:07.823668680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823735 env[1213]: time="2025-07-11T00:26:07.823681040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823735 env[1213]: time="2025-07-11T00:26:07.823694560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823735 env[1213]: time="2025-07-11T00:26:07.823706640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823735 env[1213]: time="2025-07-11T00:26:07.823718560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823735 env[1213]: time="2025-07-11T00:26:07.823731320Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 11 00:26:07.823869 env[1213]: time="2025-07-11T00:26:07.823850040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823899 env[1213]: time="2025-07-11T00:26:07.823870280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823899 env[1213]: time="2025-07-11T00:26:07.823883960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.823899 env[1213]: time="2025-07-11T00:26:07.823895320Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 11 00:26:07.823959 env[1213]: time="2025-07-11T00:26:07.823910080Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 11 00:26:07.823959 env[1213]: time="2025-07-11T00:26:07.823921280Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 11 00:26:07.823959 env[1213]: time="2025-07-11T00:26:07.823938760Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 11 00:26:07.824014 env[1213]: time="2025-07-11T00:26:07.823972800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 11 00:26:07.824227 env[1213]: time="2025-07-11T00:26:07.824158240Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.824233520Z" level=info msg="Connect containerd service" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.824293160Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825224760Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825459000Z" level=info msg="Start subscribing containerd event" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825498080Z" level=info msg="Start recovering state" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825554760Z" level=info msg="Start event monitor" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825573600Z" level=info msg="Start snapshots syncer" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825582480Z" level=info msg="Start cni network conf syncer for default" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.825591080Z" level=info msg="Start streaming server" Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.826004440Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.826040560Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 11 00:26:07.826790 env[1213]: time="2025-07-11T00:26:07.826092360Z" level=info msg="containerd successfully booted in 0.044840s" Jul 11 00:26:07.826170 systemd[1]: Started containerd.service. Jul 11 00:26:07.837759 locksmithd[1241]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 11 00:26:08.102499 tar[1211]: linux-arm64/README.md Jul 11 00:26:08.106609 systemd[1]: Finished prepare-helm.service. Jul 11 00:26:08.676428 systemd-networkd[1050]: eth0: Gained IPv6LL Jul 11 00:26:08.678013 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 11 00:26:08.678993 systemd[1]: Reached target network-online.target. Jul 11 00:26:08.681066 systemd[1]: Starting kubelet.service... Jul 11 00:26:09.238532 systemd[1]: Started kubelet.service. Jul 11 00:26:09.522735 sshd_keygen[1208]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 11 00:26:09.541918 systemd[1]: Finished sshd-keygen.service. Jul 11 00:26:09.544357 systemd[1]: Starting issuegen.service... Jul 11 00:26:09.549073 systemd[1]: issuegen.service: Deactivated successfully. Jul 11 00:26:09.549260 systemd[1]: Finished issuegen.service. Jul 11 00:26:09.551422 systemd[1]: Starting systemd-user-sessions.service... Jul 11 00:26:09.557461 systemd[1]: Finished systemd-user-sessions.service. Jul 11 00:26:09.559834 systemd[1]: Started getty@tty1.service. Jul 11 00:26:09.562029 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 11 00:26:09.563068 systemd[1]: Reached target getty.target. Jul 11 00:26:09.563881 systemd[1]: Reached target multi-user.target. Jul 11 00:26:09.565964 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 11 00:26:09.573018 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 11 00:26:09.573193 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 11 00:26:09.574044 systemd[1]: Startup finished in 626ms (kernel) + 4.719s (initrd) + 5.246s (userspace) = 10.592s. Jul 11 00:26:09.704665 kubelet[1258]: E0711 00:26:09.704598 1258 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:26:09.706194 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:26:09.706327 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:26:11.758042 systemd[1]: Created slice system-sshd.slice. Jul 11 00:26:11.759269 systemd[1]: Started sshd@0-10.0.0.54:22-10.0.0.1:40748.service. Jul 11 00:26:11.801166 sshd[1280]: Accepted publickey for core from 10.0.0.1 port 40748 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:11.803609 sshd[1280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:11.815938 systemd-logind[1202]: New session 1 of user core. Jul 11 00:26:11.816901 systemd[1]: Created slice user-500.slice. Jul 11 00:26:11.818060 systemd[1]: Starting user-runtime-dir@500.service... Jul 11 00:26:11.826462 systemd[1]: Finished user-runtime-dir@500.service. Jul 11 00:26:11.827847 systemd[1]: Starting user@500.service... Jul 11 00:26:11.830815 (systemd)[1283]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:11.893143 systemd[1283]: Queued start job for default target default.target. Jul 11 00:26:11.893656 systemd[1283]: Reached target paths.target. Jul 11 00:26:11.893687 systemd[1283]: Reached target sockets.target. Jul 11 00:26:11.893698 systemd[1283]: Reached target timers.target. Jul 11 00:26:11.893707 systemd[1283]: Reached target basic.target. Jul 11 00:26:11.893747 systemd[1283]: Reached target default.target. Jul 11 00:26:11.893775 systemd[1283]: Startup finished in 56ms. Jul 11 00:26:11.893835 systemd[1]: Started user@500.service. Jul 11 00:26:11.894784 systemd[1]: Started session-1.scope. Jul 11 00:26:11.948269 systemd[1]: Started sshd@1-10.0.0.54:22-10.0.0.1:40750.service. Jul 11 00:26:11.981646 sshd[1292]: Accepted publickey for core from 10.0.0.1 port 40750 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:11.982812 sshd[1292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:11.986593 systemd-logind[1202]: New session 2 of user core. Jul 11 00:26:11.987737 systemd[1]: Started session-2.scope. Jul 11 00:26:12.040129 sshd[1292]: pam_unix(sshd:session): session closed for user core Jul 11 00:26:12.042708 systemd[1]: sshd@1-10.0.0.54:22-10.0.0.1:40750.service: Deactivated successfully. Jul 11 00:26:12.043364 systemd[1]: session-2.scope: Deactivated successfully. Jul 11 00:26:12.043834 systemd-logind[1202]: Session 2 logged out. Waiting for processes to exit. Jul 11 00:26:12.044975 systemd[1]: Started sshd@2-10.0.0.54:22-10.0.0.1:40760.service. Jul 11 00:26:12.045657 systemd-logind[1202]: Removed session 2. Jul 11 00:26:12.077603 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 40760 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:12.078837 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:12.082931 systemd[1]: Started session-3.scope. Jul 11 00:26:12.083249 systemd-logind[1202]: New session 3 of user core. Jul 11 00:26:12.133084 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 11 00:26:12.135727 systemd[1]: sshd@2-10.0.0.54:22-10.0.0.1:40760.service: Deactivated successfully. Jul 11 00:26:12.136322 systemd[1]: session-3.scope: Deactivated successfully. Jul 11 00:26:12.136820 systemd-logind[1202]: Session 3 logged out. Waiting for processes to exit. Jul 11 00:26:12.137896 systemd[1]: Started sshd@3-10.0.0.54:22-10.0.0.1:40768.service. Jul 11 00:26:12.138539 systemd-logind[1202]: Removed session 3. Jul 11 00:26:12.171281 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 40768 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:12.172448 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:12.176178 systemd-logind[1202]: New session 4 of user core. Jul 11 00:26:12.177031 systemd[1]: Started session-4.scope. Jul 11 00:26:12.229584 sshd[1304]: pam_unix(sshd:session): session closed for user core Jul 11 00:26:12.233417 systemd[1]: Started sshd@4-10.0.0.54:22-10.0.0.1:40772.service. Jul 11 00:26:12.233943 systemd[1]: sshd@3-10.0.0.54:22-10.0.0.1:40768.service: Deactivated successfully. Jul 11 00:26:12.234560 systemd[1]: session-4.scope: Deactivated successfully. Jul 11 00:26:12.235014 systemd-logind[1202]: Session 4 logged out. Waiting for processes to exit. Jul 11 00:26:12.235694 systemd-logind[1202]: Removed session 4. Jul 11 00:26:12.265812 sshd[1309]: Accepted publickey for core from 10.0.0.1 port 40772 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:12.267306 sshd[1309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:12.271250 systemd-logind[1202]: New session 5 of user core. Jul 11 00:26:12.271340 systemd[1]: Started session-5.scope. Jul 11 00:26:12.328689 sudo[1313]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 11 00:26:12.329773 sudo[1313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:26:12.348087 dbus-daemon[1189]: avc: received setenforce notice (enforcing=1) Jul 11 00:26:12.348282 sudo[1313]: pam_unix(sudo:session): session closed for user root Jul 11 00:26:12.350311 sshd[1309]: pam_unix(sshd:session): session closed for user core Jul 11 00:26:12.353293 systemd[1]: sshd@4-10.0.0.54:22-10.0.0.1:40772.service: Deactivated successfully. Jul 11 00:26:12.353949 systemd[1]: session-5.scope: Deactivated successfully. Jul 11 00:26:12.354502 systemd-logind[1202]: Session 5 logged out. Waiting for processes to exit. Jul 11 00:26:12.355679 systemd[1]: Started sshd@5-10.0.0.54:22-10.0.0.1:40780.service. Jul 11 00:26:12.356356 systemd-logind[1202]: Removed session 5. Jul 11 00:26:12.389327 sshd[1317]: Accepted publickey for core from 10.0.0.1 port 40780 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:12.391040 sshd[1317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:12.394732 systemd-logind[1202]: New session 6 of user core. Jul 11 00:26:12.395640 systemd[1]: Started session-6.scope. Jul 11 00:26:12.448381 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 11 00:26:12.448610 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:26:12.451069 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 11 00:26:12.455734 sudo[1320]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 11 00:26:12.455948 sudo[1320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:26:12.465559 systemd[1]: Stopping audit-rules.service... Jul 11 00:26:12.465000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:26:12.467004 auditctl[1324]: No rules Jul 11 00:26:12.467282 kernel: kauditd_printk_skb: 182 callbacks suppressed Jul 11 00:26:12.467317 kernel: audit: type=1305 audit(1752193572.465:214): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:26:12.467478 systemd[1]: audit-rules.service: Deactivated successfully. Jul 11 00:26:12.467669 systemd[1]: Stopped audit-rules.service. Jul 11 00:26:12.465000 audit[1324]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffb243140 a2=420 a3=0 items=0 ppid=1 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:12.469661 systemd[1]: Starting audit-rules.service... Jul 11 00:26:12.471381 kernel: audit: type=1300 audit(1752193572.465:214): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffb243140 a2=420 a3=0 items=0 ppid=1 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:12.471437 kernel: audit: type=1327 audit(1752193572.465:214): proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:26:12.465000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:26:12.472209 kernel: audit: type=1131 audit(1752193572.466:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.495412 augenrules[1341]: No rules Jul 11 00:26:12.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.497139 sudo[1320]: pam_unix(sudo:session): session closed for user root Jul 11 00:26:12.496236 systemd[1]: Finished audit-rules.service. Jul 11 00:26:12.495000 audit[1320]: USER_END pid=1320 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.501334 kernel: audit: type=1130 audit(1752193572.495:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.501373 kernel: audit: type=1106 audit(1752193572.495:217): pid=1320 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.501528 sshd[1317]: pam_unix(sshd:session): session closed for user core Jul 11 00:26:12.496000 audit[1320]: CRED_DISP pid=1320 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.503626 systemd[1]: Started sshd@6-10.0.0.54:22-10.0.0.1:40792.service. Jul 11 00:26:12.503925 kernel: audit: type=1104 audit(1752193572.496:218): pid=1320 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.503952 kernel: audit: type=1130 audit(1752193572.502:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.54:22-10.0.0.1:40792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.54:22-10.0.0.1:40792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.505000 audit[1317]: USER_END pid=1317 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.505000 audit[1317]: CRED_DISP pid=1317 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.509551 systemd[1]: sshd@5-10.0.0.54:22-10.0.0.1:40780.service: Deactivated successfully. Jul 11 00:26:12.510543 systemd[1]: session-6.scope: Deactivated successfully. Jul 11 00:26:12.511907 systemd-logind[1202]: Session 6 logged out. Waiting for processes to exit. Jul 11 00:26:12.512483 kernel: audit: type=1106 audit(1752193572.505:220): pid=1317 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.512536 kernel: audit: type=1104 audit(1752193572.505:221): pid=1317 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.54:22-10.0.0.1:40780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.513284 systemd-logind[1202]: Removed session 6. Jul 11 00:26:12.536000 audit[1346]: USER_ACCT pid=1346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.537664 sshd[1346]: Accepted publickey for core from 10.0.0.1 port 40792 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:26:12.538000 audit[1346]: CRED_ACQ pid=1346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.538000 audit[1346]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf4963d0 a2=3 a3=1 items=0 ppid=1 pid=1346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:12.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:26:12.538791 sshd[1346]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:26:12.543563 systemd-logind[1202]: New session 7 of user core. Jul 11 00:26:12.544127 systemd[1]: Started session-7.scope. Jul 11 00:26:12.548000 audit[1346]: USER_START pid=1346 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.548000 audit[1349]: CRED_ACQ pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:12.596000 audit[1350]: USER_ACCT pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.596000 audit[1350]: CRED_REFR pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.596880 sudo[1350]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 11 00:26:12.597092 sudo[1350]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:26:12.599000 audit[1350]: USER_START pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:12.660386 systemd[1]: Starting docker.service... Jul 11 00:26:12.758247 env[1362]: time="2025-07-11T00:26:12.758179928Z" level=info msg="Starting up" Jul 11 00:26:12.760046 env[1362]: time="2025-07-11T00:26:12.760017490Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:26:12.760126 env[1362]: time="2025-07-11T00:26:12.760112441Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:26:12.760282 env[1362]: time="2025-07-11T00:26:12.760264623Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:26:12.760342 env[1362]: time="2025-07-11T00:26:12.760328761Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:26:12.762802 env[1362]: time="2025-07-11T00:26:12.762766021Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:26:12.762802 env[1362]: time="2025-07-11T00:26:12.762791339Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:26:12.762884 env[1362]: time="2025-07-11T00:26:12.762806491Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:26:12.762884 env[1362]: time="2025-07-11T00:26:12.762816461Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:26:12.961364 env[1362]: time="2025-07-11T00:26:12.961263663Z" level=info msg="Loading containers: start." Jul 11 00:26:13.005000 audit[1398]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.005000 audit[1398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcf0d4db0 a2=0 a3=1 items=0 ppid=1362 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.005000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 11 00:26:13.007000 audit[1400]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.007000 audit[1400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc5e6f5a0 a2=0 a3=1 items=0 ppid=1362 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 11 00:26:13.008000 audit[1402]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.008000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe1b09730 a2=0 a3=1 items=0 ppid=1362 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.008000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:26:13.010000 audit[1404]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.010000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc69d1fe0 a2=0 a3=1 items=0 ppid=1362 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.010000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:26:13.015000 audit[1406]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.015000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcc14bfb0 a2=0 a3=1 items=0 ppid=1362 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.015000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 11 00:26:13.044000 audit[1411]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.044000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffea9f8e90 a2=0 a3=1 items=0 ppid=1362 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.044000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 11 00:26:13.051000 audit[1413]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.051000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffebcced60 a2=0 a3=1 items=0 ppid=1362 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.051000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 11 00:26:13.052000 audit[1415]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.052000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd52c7a50 a2=0 a3=1 items=0 ppid=1362 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.052000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 11 00:26:13.054000 audit[1417]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.054000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff4447d70 a2=0 a3=1 items=0 ppid=1362 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.054000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:26:13.060000 audit[1421]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.060000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff3fb0760 a2=0 a3=1 items=0 ppid=1362 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:26:13.068000 audit[1422]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.068000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff0f44840 a2=0 a3=1 items=0 ppid=1362 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.068000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:26:13.079219 kernel: Initializing XFRM netlink socket Jul 11 00:26:13.101936 env[1362]: time="2025-07-11T00:26:13.101897135Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 11 00:26:13.117000 audit[1430]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.117000 audit[1430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff95b1540 a2=0 a3=1 items=0 ppid=1362 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.117000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 11 00:26:13.132000 audit[1433]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.132000 audit[1433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd2fffcd0 a2=0 a3=1 items=0 ppid=1362 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.132000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 11 00:26:13.134000 audit[1436]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.134000 audit[1436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffd3c3a80 a2=0 a3=1 items=0 ppid=1362 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.134000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 11 00:26:13.136000 audit[1438]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.136000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd2114bb0 a2=0 a3=1 items=0 ppid=1362 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 11 00:26:13.138000 audit[1440]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.138000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcc129d90 a2=0 a3=1 items=0 ppid=1362 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.138000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 11 00:26:13.140000 audit[1442]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.140000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd08dbf20 a2=0 a3=1 items=0 ppid=1362 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.140000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 11 00:26:13.142000 audit[1444]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.142000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffe0d2ba20 a2=0 a3=1 items=0 ppid=1362 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 11 00:26:13.152000 audit[1447]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.152000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe1c2ca30 a2=0 a3=1 items=0 ppid=1362 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.152000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 11 00:26:13.154000 audit[1449]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.154000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffeb25d600 a2=0 a3=1 items=0 ppid=1362 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:26:13.156000 audit[1451]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.156000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc1a2daa0 a2=0 a3=1 items=0 ppid=1362 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.156000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:26:13.159000 audit[1453]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.159000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc64e6ac0 a2=0 a3=1 items=0 ppid=1362 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.159000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 11 00:26:13.160706 systemd-networkd[1050]: docker0: Link UP Jul 11 00:26:13.166000 audit[1457]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.166000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd8030b40 a2=0 a3=1 items=0 ppid=1362 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:26:13.178000 audit[1458]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:13.178000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff525f2c0 a2=0 a3=1 items=0 ppid=1362 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:13.178000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:26:13.179664 env[1362]: time="2025-07-11T00:26:13.179634273Z" level=info msg="Loading containers: done." Jul 11 00:26:13.200222 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3152518215-merged.mount: Deactivated successfully. Jul 11 00:26:13.203403 env[1362]: time="2025-07-11T00:26:13.203361475Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 11 00:26:13.203576 env[1362]: time="2025-07-11T00:26:13.203546204Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 11 00:26:13.203678 env[1362]: time="2025-07-11T00:26:13.203663651Z" level=info msg="Daemon has completed initialization" Jul 11 00:26:13.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:13.217166 systemd[1]: Started docker.service. Jul 11 00:26:13.223806 env[1362]: time="2025-07-11T00:26:13.223753487Z" level=info msg="API listen on /run/docker.sock" Jul 11 00:26:13.795897 env[1213]: time="2025-07-11T00:26:13.795856364Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 11 00:26:14.331585 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2935606909.mount: Deactivated successfully. Jul 11 00:26:15.742465 env[1213]: time="2025-07-11T00:26:15.742406727Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:15.743609 env[1213]: time="2025-07-11T00:26:15.743582656Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:15.745441 env[1213]: time="2025-07-11T00:26:15.745407873Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:15.747148 env[1213]: time="2025-07-11T00:26:15.747117595Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:15.747938 env[1213]: time="2025-07-11T00:26:15.747909751Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a\"" Jul 11 00:26:15.748545 env[1213]: time="2025-07-11T00:26:15.748516537Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 11 00:26:17.276970 env[1213]: time="2025-07-11T00:26:17.276918210Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:17.278213 env[1213]: time="2025-07-11T00:26:17.278178413Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:17.279935 env[1213]: time="2025-07-11T00:26:17.279903080Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:17.281580 env[1213]: time="2025-07-11T00:26:17.281551564Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:17.282485 env[1213]: time="2025-07-11T00:26:17.282456485Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038\"" Jul 11 00:26:17.283061 env[1213]: time="2025-07-11T00:26:17.283035442Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 11 00:26:18.583909 env[1213]: time="2025-07-11T00:26:18.583859792Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:18.585132 env[1213]: time="2025-07-11T00:26:18.585108747Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:18.587035 env[1213]: time="2025-07-11T00:26:18.586999315Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:18.588657 env[1213]: time="2025-07-11T00:26:18.588634999Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:18.589497 env[1213]: time="2025-07-11T00:26:18.589468072Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f\"" Jul 11 00:26:18.590139 env[1213]: time="2025-07-11T00:26:18.590113691Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 11 00:26:19.595015 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3527436069.mount: Deactivated successfully. Jul 11 00:26:19.750177 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 11 00:26:19.750376 systemd[1]: Stopped kubelet.service. Jul 11 00:26:19.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:19.751781 systemd[1]: Starting kubelet.service... Jul 11 00:26:19.752675 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 11 00:26:19.752746 kernel: audit: type=1130 audit(1752193579.749:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:19.752768 kernel: audit: type=1131 audit(1752193579.749:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:19.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:19.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:19.883432 systemd[1]: Started kubelet.service. Jul 11 00:26:19.886233 kernel: audit: type=1130 audit(1752193579.882:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:19.918562 kubelet[1498]: E0711 00:26:19.918510 1498 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:26:19.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:26:19.921314 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:26:19.921441 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:26:19.924238 kernel: audit: type=1131 audit(1752193579.920:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:26:20.294362 env[1213]: time="2025-07-11T00:26:20.294307101Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:20.295414 env[1213]: time="2025-07-11T00:26:20.295381080Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:20.296976 env[1213]: time="2025-07-11T00:26:20.296939646Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:20.298079 env[1213]: time="2025-07-11T00:26:20.298041961Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:20.298565 env[1213]: time="2025-07-11T00:26:20.298524760Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9\"" Jul 11 00:26:20.299163 env[1213]: time="2025-07-11T00:26:20.299026796Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 11 00:26:20.837007 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3795343878.mount: Deactivated successfully. Jul 11 00:26:21.662112 env[1213]: time="2025-07-11T00:26:21.662063604Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:21.670187 env[1213]: time="2025-07-11T00:26:21.670155318Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:21.672016 env[1213]: time="2025-07-11T00:26:21.671973006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:21.674191 env[1213]: time="2025-07-11T00:26:21.674158019Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:21.675107 env[1213]: time="2025-07-11T00:26:21.675074917Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 11 00:26:21.675652 env[1213]: time="2025-07-11T00:26:21.675627634Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 11 00:26:22.104087 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount534488655.mount: Deactivated successfully. Jul 11 00:26:22.109185 env[1213]: time="2025-07-11T00:26:22.109135095Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:22.111163 env[1213]: time="2025-07-11T00:26:22.111122793Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:22.112447 env[1213]: time="2025-07-11T00:26:22.112422849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:22.113637 env[1213]: time="2025-07-11T00:26:22.113609864Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:22.114304 env[1213]: time="2025-07-11T00:26:22.114276371Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 11 00:26:22.114795 env[1213]: time="2025-07-11T00:26:22.114762489Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 11 00:26:22.763688 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3058059587.mount: Deactivated successfully. Jul 11 00:26:25.085155 env[1213]: time="2025-07-11T00:26:25.085089970Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:25.086604 env[1213]: time="2025-07-11T00:26:25.086577653Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:25.088950 env[1213]: time="2025-07-11T00:26:25.088898503Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:25.090464 env[1213]: time="2025-07-11T00:26:25.090429763Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:25.091364 env[1213]: time="2025-07-11T00:26:25.091340034Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Jul 11 00:26:29.850113 systemd[1]: Stopped kubelet.service. Jul 11 00:26:29.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:29.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:29.852580 systemd[1]: Starting kubelet.service... Jul 11 00:26:29.854180 kernel: audit: type=1130 audit(1752193589.850:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:29.854274 kernel: audit: type=1131 audit(1752193589.850:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:29.876885 systemd[1]: Reloading. Jul 11 00:26:29.938669 /usr/lib/systemd/system-generators/torcx-generator[1554]: time="2025-07-11T00:26:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:26:29.939063 /usr/lib/systemd/system-generators/torcx-generator[1554]: time="2025-07-11T00:26:29Z" level=info msg="torcx already run" Jul 11 00:26:30.102825 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:26:30.102844 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:26:30.118531 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177267 kernel: audit: type=1400 audit(1752193590.172:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177310 kernel: audit: type=1400 audit(1752193590.172:263): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177335 kernel: audit: type=1400 audit(1752193590.172:264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.178983 kernel: audit: type=1400 audit(1752193590.172:265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.186141 kernel: audit: type=1400 audit(1752193590.172:266): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.186275 kernel: audit: type=1400 audit(1752193590.172:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.189555 kernel: audit: type=1400 audit(1752193590.172:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.191336 kernel: audit: type=1400 audit(1752193590.172:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit: BPF prog-id=46 op=LOAD Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.176000 audit: BPF prog-id=47 op=LOAD Jul 11 00:26:30.176000 audit: BPF prog-id=30 op=UNLOAD Jul 11 00:26:30.176000 audit: BPF prog-id=31 op=UNLOAD Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.180000 audit: BPF prog-id=48 op=LOAD Jul 11 00:26:30.180000 audit: BPF prog-id=40 op=UNLOAD Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit: BPF prog-id=49 op=LOAD Jul 11 00:26:30.182000 audit: BPF prog-id=41 op=UNLOAD Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit: BPF prog-id=50 op=LOAD Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.190000 audit: BPF prog-id=51 op=LOAD Jul 11 00:26:30.190000 audit: BPF prog-id=42 op=UNLOAD Jul 11 00:26:30.190000 audit: BPF prog-id=43 op=UNLOAD Jul 11 00:26:30.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.191000 audit: BPF prog-id=52 op=LOAD Jul 11 00:26:30.191000 audit: BPF prog-id=39 op=UNLOAD Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit: BPF prog-id=53 op=LOAD Jul 11 00:26:30.192000 audit: BPF prog-id=32 op=UNLOAD Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit: BPF prog-id=54 op=LOAD Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.192000 audit: BPF prog-id=55 op=LOAD Jul 11 00:26:30.192000 audit: BPF prog-id=33 op=UNLOAD Jul 11 00:26:30.192000 audit: BPF prog-id=34 op=UNLOAD Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit: BPF prog-id=56 op=LOAD Jul 11 00:26:30.194000 audit: BPF prog-id=35 op=UNLOAD Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit: BPF prog-id=57 op=LOAD Jul 11 00:26:30.194000 audit: BPF prog-id=36 op=UNLOAD Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit: BPF prog-id=58 op=LOAD Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit: BPF prog-id=59 op=LOAD Jul 11 00:26:30.195000 audit: BPF prog-id=37 op=UNLOAD Jul 11 00:26:30.195000 audit: BPF prog-id=38 op=UNLOAD Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.195000 audit: BPF prog-id=60 op=LOAD Jul 11 00:26:30.195000 audit: BPF prog-id=44 op=UNLOAD Jul 11 00:26:30.213874 systemd[1]: Started kubelet.service. Jul 11 00:26:30.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:30.216134 systemd[1]: Stopping kubelet.service... Jul 11 00:26:30.216574 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:26:30.216761 systemd[1]: Stopped kubelet.service. Jul 11 00:26:30.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:30.218421 systemd[1]: Starting kubelet.service... Jul 11 00:26:30.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:30.310893 systemd[1]: Started kubelet.service. Jul 11 00:26:30.366252 kubelet[1598]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:26:30.366252 kubelet[1598]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 11 00:26:30.366252 kubelet[1598]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:26:30.366252 kubelet[1598]: I0711 00:26:30.364249 1598 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:26:30.672955 kubelet[1598]: I0711 00:26:30.672844 1598 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 11 00:26:30.672955 kubelet[1598]: I0711 00:26:30.672882 1598 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:26:30.673209 kubelet[1598]: I0711 00:26:30.673169 1598 server.go:954] "Client rotation is on, will bootstrap in background" Jul 11 00:26:30.712623 kubelet[1598]: I0711 00:26:30.712512 1598 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:26:30.713322 kubelet[1598]: E0711 00:26:30.713293 1598 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.54:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:30.722964 kubelet[1598]: E0711 00:26:30.722896 1598 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:26:30.722964 kubelet[1598]: I0711 00:26:30.722960 1598 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:26:30.726042 kubelet[1598]: I0711 00:26:30.726008 1598 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:26:30.726455 kubelet[1598]: I0711 00:26:30.726419 1598 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:26:30.726756 kubelet[1598]: I0711 00:26:30.726547 1598 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:26:30.727000 kubelet[1598]: I0711 00:26:30.726984 1598 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:26:30.727097 kubelet[1598]: I0711 00:26:30.727086 1598 container_manager_linux.go:304] "Creating device plugin manager" Jul 11 00:26:30.727369 kubelet[1598]: I0711 00:26:30.727352 1598 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:26:30.730152 kubelet[1598]: I0711 00:26:30.730124 1598 kubelet.go:446] "Attempting to sync node with API server" Jul 11 00:26:30.730297 kubelet[1598]: I0711 00:26:30.730282 1598 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:26:30.730374 kubelet[1598]: I0711 00:26:30.730364 1598 kubelet.go:352] "Adding apiserver pod source" Jul 11 00:26:30.730432 kubelet[1598]: I0711 00:26:30.730422 1598 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:26:30.731233 kubelet[1598]: W0711 00:26:30.731141 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.54:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:30.731308 kubelet[1598]: E0711 00:26:30.731250 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.54:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:30.732164 kubelet[1598]: W0711 00:26:30.732121 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.54:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:30.732245 kubelet[1598]: E0711 00:26:30.732165 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.54:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:30.734168 kubelet[1598]: I0711 00:26:30.734150 1598 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:26:30.734871 kubelet[1598]: I0711 00:26:30.734852 1598 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 11 00:26:30.735080 kubelet[1598]: W0711 00:26:30.735067 1598 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 11 00:26:30.736345 kubelet[1598]: I0711 00:26:30.736319 1598 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 11 00:26:30.736407 kubelet[1598]: I0711 00:26:30.736358 1598 server.go:1287] "Started kubelet" Jul 11 00:26:30.738913 kubelet[1598]: I0711 00:26:30.738863 1598 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:26:30.739426 kubelet[1598]: I0711 00:26:30.739377 1598 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:26:30.738000 audit[1598]: AVC avc: denied { mac_admin } for pid=1598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.738000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:26:30.738000 audit[1598]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009350b0 a1=40009106d8 a2=4000935080 a3=25 items=0 ppid=1 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.738000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:26:30.738000 audit[1598]: AVC avc: denied { mac_admin } for pid=1598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.738000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:26:30.738000 audit[1598]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400049ff40 a1=40009106f0 a2=4000935140 a3=25 items=0 ppid=1 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.738000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:26:30.741681 kubelet[1598]: I0711 00:26:30.739709 1598 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:26:30.741681 kubelet[1598]: I0711 00:26:30.740643 1598 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:26:30.741681 kubelet[1598]: I0711 00:26:30.740697 1598 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 11 00:26:30.741681 kubelet[1598]: I0711 00:26:30.740790 1598 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:26:30.741681 kubelet[1598]: I0711 00:26:30.741130 1598 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:26:30.741786 kubelet[1598]: I0711 00:26:30.741708 1598 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 11 00:26:30.746805 kubelet[1598]: E0711 00:26:30.746767 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:26:30.746904 kubelet[1598]: I0711 00:26:30.746873 1598 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 11 00:26:30.746950 kubelet[1598]: I0711 00:26:30.746937 1598 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:26:30.747738 kubelet[1598]: W0711 00:26:30.747539 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.54:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:30.747771 kubelet[1598]: E0711 00:26:30.747751 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.54:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:30.747793 kubelet[1598]: E0711 00:26:30.747750 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.54:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.54:6443: connect: connection refused" interval="200ms" Jul 11 00:26:30.747994 kubelet[1598]: E0711 00:26:30.747607 1598 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.54:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.54:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18510ac9898e421b default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-11 00:26:30.736339483 +0000 UTC m=+0.421320306,LastTimestamp:2025-07-11 00:26:30.736339483 +0000 UTC m=+0.421320306,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 11 00:26:30.748539 kubelet[1598]: I0711 00:26:30.748518 1598 factory.go:221] Registration of the systemd container factory successfully Jul 11 00:26:30.748627 kubelet[1598]: I0711 00:26:30.748606 1598 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:26:30.749466 kubelet[1598]: I0711 00:26:30.749437 1598 server.go:479] "Adding debug handlers to kubelet server" Jul 11 00:26:30.749000 audit[1611]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1611 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.749000 audit[1611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff111a920 a2=0 a3=1 items=0 ppid=1598 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:26:30.750000 audit[1614]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1614 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.750000 audit[1614]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5798a80 a2=0 a3=1 items=0 ppid=1598 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:26:30.751784 kubelet[1598]: I0711 00:26:30.750163 1598 factory.go:221] Registration of the containerd container factory successfully Jul 11 00:26:30.752173 kubelet[1598]: E0711 00:26:30.752149 1598 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 11 00:26:30.752000 audit[1616]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.752000 audit[1616]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe8afeaa0 a2=0 a3=1 items=0 ppid=1598 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.752000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:26:30.755000 audit[1619]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.755000 audit[1619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd94f9990 a2=0 a3=1 items=0 ppid=1598 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:26:30.762032 kubelet[1598]: I0711 00:26:30.762008 1598 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 11 00:26:30.762032 kubelet[1598]: I0711 00:26:30.762028 1598 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 11 00:26:30.762189 kubelet[1598]: I0711 00:26:30.762049 1598 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:26:30.764000 audit[1624]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.764000 audit[1624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff204da60 a2=0 a3=1 items=0 ppid=1598 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 11 00:26:30.765859 kubelet[1598]: I0711 00:26:30.765814 1598 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 11 00:26:30.765000 audit[1627]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.765000 audit[1627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc90b7820 a2=0 a3=1 items=0 ppid=1598 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.765000 audit[1626]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1626 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:30.765000 audit[1626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeaa2a7f0 a2=0 a3=1 items=0 ppid=1598 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.765000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:26:30.767333 kubelet[1598]: I0711 00:26:30.767310 1598 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 11 00:26:30.767425 kubelet[1598]: I0711 00:26:30.767414 1598 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 11 00:26:30.767507 kubelet[1598]: I0711 00:26:30.767488 1598 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 11 00:26:30.767574 kubelet[1598]: I0711 00:26:30.767564 1598 kubelet.go:2382] "Starting kubelet main sync loop" Jul 11 00:26:30.767672 kubelet[1598]: E0711 00:26:30.767655 1598 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:26:30.765000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:26:30.767000 audit[1628]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:30.767000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb60adb0 a2=0 a3=1 items=0 ppid=1598 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:26:30.768506 kubelet[1598]: W0711 00:26:30.768480 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.54:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:30.768600 kubelet[1598]: E0711 00:26:30.768578 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.54:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:30.768000 audit[1630]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:30.768000 audit[1630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc2d1c080 a2=0 a3=1 items=0 ppid=1598 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.768000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:26:30.768000 audit[1629]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.768000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3ce7130 a2=0 a3=1 items=0 ppid=1598 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.768000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:26:30.769000 audit[1631]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:30.769000 audit[1631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff9f4e070 a2=0 a3=1 items=0 ppid=1598 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.769000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:26:30.769000 audit[1632]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:30.769000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6bae0c0 a2=0 a3=1 items=0 ppid=1598 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.769000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:26:30.847711 kubelet[1598]: E0711 00:26:30.847679 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:26:30.868669 kubelet[1598]: E0711 00:26:30.868623 1598 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 11 00:26:30.872667 kubelet[1598]: I0711 00:26:30.872640 1598 policy_none.go:49] "None policy: Start" Jul 11 00:26:30.872667 kubelet[1598]: I0711 00:26:30.872669 1598 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 11 00:26:30.872746 kubelet[1598]: I0711 00:26:30.872683 1598 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:26:30.877283 systemd[1]: Created slice kubepods.slice. Jul 11 00:26:30.881453 systemd[1]: Created slice kubepods-burstable.slice. Jul 11 00:26:30.883977 systemd[1]: Created slice kubepods-besteffort.slice. Jul 11 00:26:30.893977 kubelet[1598]: I0711 00:26:30.893940 1598 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 11 00:26:30.892000 audit[1598]: AVC avc: denied { mac_admin } for pid=1598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:30.892000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:26:30.892000 audit[1598]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000824ab0 a1=40009c0f18 a2=4000824a80 a3=25 items=0 ppid=1 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:30.892000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:26:30.894253 kubelet[1598]: I0711 00:26:30.894012 1598 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 11 00:26:30.894253 kubelet[1598]: I0711 00:26:30.894135 1598 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:26:30.894253 kubelet[1598]: I0711 00:26:30.894147 1598 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:26:30.895051 kubelet[1598]: I0711 00:26:30.895018 1598 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:26:30.895521 kubelet[1598]: E0711 00:26:30.895499 1598 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 11 00:26:30.895660 kubelet[1598]: E0711 00:26:30.895645 1598 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 11 00:26:30.948726 kubelet[1598]: E0711 00:26:30.948615 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.54:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.54:6443: connect: connection refused" interval="400ms" Jul 11 00:26:30.996757 kubelet[1598]: I0711 00:26:30.996727 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:26:30.997251 kubelet[1598]: E0711 00:26:30.997224 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.54:6443/api/v1/nodes\": dial tcp 10.0.0.54:6443: connect: connection refused" node="localhost" Jul 11 00:26:31.075887 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 11 00:26:31.086918 kubelet[1598]: E0711 00:26:31.086882 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:31.088260 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 11 00:26:31.089832 kubelet[1598]: E0711 00:26:31.089793 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:31.091643 systemd[1]: Created slice kubepods-burstable-pod25529bd75e8bd997faf785116a06f3f5.slice. Jul 11 00:26:31.093086 kubelet[1598]: E0711 00:26:31.093059 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:31.149381 kubelet[1598]: I0711 00:26:31.149326 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/25529bd75e8bd997faf785116a06f3f5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"25529bd75e8bd997faf785116a06f3f5\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:31.149381 kubelet[1598]: I0711 00:26:31.149381 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/25529bd75e8bd997faf785116a06f3f5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"25529bd75e8bd997faf785116a06f3f5\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:31.149501 kubelet[1598]: I0711 00:26:31.149403 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:31.149501 kubelet[1598]: I0711 00:26:31.149420 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:31.149501 kubelet[1598]: I0711 00:26:31.149436 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:31.149501 kubelet[1598]: I0711 00:26:31.149454 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:31.149501 kubelet[1598]: I0711 00:26:31.149468 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/25529bd75e8bd997faf785116a06f3f5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"25529bd75e8bd997faf785116a06f3f5\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:31.149623 kubelet[1598]: I0711 00:26:31.149494 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:31.149623 kubelet[1598]: I0711 00:26:31.149556 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:31.201783 kubelet[1598]: I0711 00:26:31.201687 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:26:31.202067 kubelet[1598]: E0711 00:26:31.202042 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.54:6443/api/v1/nodes\": dial tcp 10.0.0.54:6443: connect: connection refused" node="localhost" Jul 11 00:26:31.349528 kubelet[1598]: E0711 00:26:31.349485 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.54:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.54:6443: connect: connection refused" interval="800ms" Jul 11 00:26:31.388095 kubelet[1598]: E0711 00:26:31.388049 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:31.388839 env[1213]: time="2025-07-11T00:26:31.388802783Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 11 00:26:31.390993 kubelet[1598]: E0711 00:26:31.390968 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:31.391531 env[1213]: time="2025-07-11T00:26:31.391322772Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 11 00:26:31.393967 kubelet[1598]: E0711 00:26:31.393942 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:31.394563 env[1213]: time="2025-07-11T00:26:31.394529225Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:25529bd75e8bd997faf785116a06f3f5,Namespace:kube-system,Attempt:0,}" Jul 11 00:26:31.534788 kubelet[1598]: W0711 00:26:31.534676 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.54:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:31.534788 kubelet[1598]: E0711 00:26:31.534740 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.54:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:31.603434 kubelet[1598]: I0711 00:26:31.603354 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:26:31.603713 kubelet[1598]: E0711 00:26:31.603663 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.54:6443/api/v1/nodes\": dial tcp 10.0.0.54:6443: connect: connection refused" node="localhost" Jul 11 00:26:31.795279 kubelet[1598]: W0711 00:26:31.795131 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.54:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:31.795279 kubelet[1598]: E0711 00:26:31.795237 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.54:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:31.903642 kubelet[1598]: W0711 00:26:31.903576 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.54:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:31.903642 kubelet[1598]: E0711 00:26:31.903642 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.54:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:31.922281 kubelet[1598]: E0711 00:26:31.922160 1598 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.54:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.54:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18510ac9898e421b default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-11 00:26:30.736339483 +0000 UTC m=+0.421320306,LastTimestamp:2025-07-11 00:26:30.736339483 +0000 UTC m=+0.421320306,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 11 00:26:32.022762 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1899767129.mount: Deactivated successfully. Jul 11 00:26:32.038131 env[1213]: time="2025-07-11T00:26:32.038079221Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.042133 env[1213]: time="2025-07-11T00:26:32.042091465Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.045968 env[1213]: time="2025-07-11T00:26:32.045846521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.048128 env[1213]: time="2025-07-11T00:26:32.048092892Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.050592 env[1213]: time="2025-07-11T00:26:32.050559657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.052897 env[1213]: time="2025-07-11T00:26:32.052866669Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.053663 env[1213]: time="2025-07-11T00:26:32.053637071Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.056196 env[1213]: time="2025-07-11T00:26:32.056165596Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.057874 env[1213]: time="2025-07-11T00:26:32.057844422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.058551 kubelet[1598]: W0711 00:26:32.058457 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.54:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.54:6443: connect: connection refused Jul 11 00:26:32.058551 kubelet[1598]: E0711 00:26:32.058521 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.54:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.54:6443: connect: connection refused" logger="UnhandledError" Jul 11 00:26:32.060728 env[1213]: time="2025-07-11T00:26:32.060697886Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.061494 env[1213]: time="2025-07-11T00:26:32.061470405Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.062145 env[1213]: time="2025-07-11T00:26:32.062124358Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:32.098762 env[1213]: time="2025-07-11T00:26:32.097806424Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:32.098762 env[1213]: time="2025-07-11T00:26:32.097846811Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:32.098762 env[1213]: time="2025-07-11T00:26:32.097857478Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:32.098762 env[1213]: time="2025-07-11T00:26:32.098080988Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f021f23fce29db7ccdeda9526a18111c7e7aa9d13cfb9ca72336028deff380d3 pid=1657 runtime=io.containerd.runc.v2 Jul 11 00:26:32.099279 env[1213]: time="2025-07-11T00:26:32.099196823Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:32.099279 env[1213]: time="2025-07-11T00:26:32.099243443Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:32.099279 env[1213]: time="2025-07-11T00:26:32.099252711Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:32.099428 env[1213]: time="2025-07-11T00:26:32.099258783Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:32.099428 env[1213]: time="2025-07-11T00:26:32.099290382Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:32.099428 env[1213]: time="2025-07-11T00:26:32.099300808Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:32.100193 env[1213]: time="2025-07-11T00:26:32.099454050Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e359a98c5d2665bb7c6fd689d7d1475cbeb6391a64cb03e911ae735c93969959 pid=1656 runtime=io.containerd.runc.v2 Jul 11 00:26:32.100551 env[1213]: time="2025-07-11T00:26:32.100501693Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2aa1b1d1ae25fed8033a7a1250b89f0d2a6fca16823c1a82898054e63b907376 pid=1655 runtime=io.containerd.runc.v2 Jul 11 00:26:32.111878 systemd[1]: Started cri-containerd-e359a98c5d2665bb7c6fd689d7d1475cbeb6391a64cb03e911ae735c93969959.scope. Jul 11 00:26:32.116350 systemd[1]: Started cri-containerd-f021f23fce29db7ccdeda9526a18111c7e7aa9d13cfb9ca72336028deff380d3.scope. Jul 11 00:26:32.130730 systemd[1]: Started cri-containerd-2aa1b1d1ae25fed8033a7a1250b89f0d2a6fca16823c1a82898054e63b907376.scope. Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.147000 audit: BPF prog-id=61 op=LOAD Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1656 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353961393863356432363635626237633666643638396437643134 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1656 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353961393863356432363635626237633666643638396437643134 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150713 kubelet[1598]: E0711 00:26:32.150669 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.54:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.54:6443: connect: connection refused" interval="1.6s" Jul 11 00:26:32.148000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.148000 audit: BPF prog-id=62 op=LOAD Jul 11 00:26:32.148000 audit[1681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1656 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353961393863356432363635626237633666643638396437643134 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit: BPF prog-id=63 op=LOAD Jul 11 00:26:32.150000 audit[1681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1656 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353961393863356432363635626237633666643638396437643134 Jul 11 00:26:32.150000 audit: BPF prog-id=63 op=UNLOAD Jul 11 00:26:32.150000 audit: BPF prog-id=62 op=UNLOAD Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { perfmon } for pid=1681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit[1681]: AVC avc: denied { bpf } for pid=1681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.150000 audit: BPF prog-id=64 op=LOAD Jul 11 00:26:32.150000 audit[1681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1656 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353961393863356432363635626237633666643638396437643134 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.156000 audit: BPF prog-id=65 op=LOAD Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1657 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323166323366636532396462376363646564613935323661313831 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1657 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323166323366636532396462376363646564613935323661313831 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.157000 audit: BPF prog-id=66 op=LOAD Jul 11 00:26:32.157000 audit[1680]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1657 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323166323366636532396462376363646564613935323661313831 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.159000 audit: BPF prog-id=67 op=LOAD Jul 11 00:26:32.159000 audit[1680]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1657 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323166323366636532396462376363646564613935323661313831 Jul 11 00:26:32.161000 audit: BPF prog-id=67 op=UNLOAD Jul 11 00:26:32.161000 audit: BPF prog-id=66 op=UNLOAD Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit: BPF prog-id=68 op=LOAD Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { perfmon } for pid=1680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1655 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613162316431616532356665643830333361376131323530623839 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1655 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613162316431616532356665643830333361376131323530623839 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit: BPF prog-id=69 op=LOAD Jul 11 00:26:32.161000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1655 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613162316431616532356665643830333361376131323530623839 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit: BPF prog-id=70 op=LOAD Jul 11 00:26:32.161000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1655 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613162316431616532356665643830333361376131323530623839 Jul 11 00:26:32.161000 audit: BPF prog-id=70 op=UNLOAD Jul 11 00:26:32.161000 audit: BPF prog-id=69 op=UNLOAD Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit: BPF prog-id=71 op=LOAD Jul 11 00:26:32.161000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1655 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613162316431616532356665643830333361376131323530623839 Jul 11 00:26:32.161000 audit[1680]: AVC avc: denied { bpf } for pid=1680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.161000 audit: BPF prog-id=72 op=LOAD Jul 11 00:26:32.161000 audit[1680]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1657 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323166323366636532396462376363646564613935323661313831 Jul 11 00:26:32.180622 env[1213]: time="2025-07-11T00:26:32.180576342Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:25529bd75e8bd997faf785116a06f3f5,Namespace:kube-system,Attempt:0,} returns sandbox id \"e359a98c5d2665bb7c6fd689d7d1475cbeb6391a64cb03e911ae735c93969959\"" Jul 11 00:26:32.182368 kubelet[1598]: E0711 00:26:32.182340 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:32.183557 env[1213]: time="2025-07-11T00:26:32.183489289Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"2aa1b1d1ae25fed8033a7a1250b89f0d2a6fca16823c1a82898054e63b907376\"" Jul 11 00:26:32.185647 kubelet[1598]: E0711 00:26:32.185288 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:32.186100 env[1213]: time="2025-07-11T00:26:32.186063355Z" level=info msg="CreateContainer within sandbox \"e359a98c5d2665bb7c6fd689d7d1475cbeb6391a64cb03e911ae735c93969959\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 11 00:26:32.186741 env[1213]: time="2025-07-11T00:26:32.186384779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"f021f23fce29db7ccdeda9526a18111c7e7aa9d13cfb9ca72336028deff380d3\"" Jul 11 00:26:32.187379 kubelet[1598]: E0711 00:26:32.187357 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:32.188102 env[1213]: time="2025-07-11T00:26:32.187950990Z" level=info msg="CreateContainer within sandbox \"2aa1b1d1ae25fed8033a7a1250b89f0d2a6fca16823c1a82898054e63b907376\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 11 00:26:32.188787 env[1213]: time="2025-07-11T00:26:32.188758105Z" level=info msg="CreateContainer within sandbox \"f021f23fce29db7ccdeda9526a18111c7e7aa9d13cfb9ca72336028deff380d3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 11 00:26:32.246216 env[1213]: time="2025-07-11T00:26:32.246146537Z" level=info msg="CreateContainer within sandbox \"e359a98c5d2665bb7c6fd689d7d1475cbeb6391a64cb03e911ae735c93969959\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"fc9eab3614c8afd7e229aaf2bdcb444249501763e984ae7012e7be43557c578a\"" Jul 11 00:26:32.246957 env[1213]: time="2025-07-11T00:26:32.246925488Z" level=info msg="StartContainer for \"fc9eab3614c8afd7e229aaf2bdcb444249501763e984ae7012e7be43557c578a\"" Jul 11 00:26:32.261775 systemd[1]: Started cri-containerd-fc9eab3614c8afd7e229aaf2bdcb444249501763e984ae7012e7be43557c578a.scope. Jul 11 00:26:32.299114 env[1213]: time="2025-07-11T00:26:32.296164435Z" level=info msg="CreateContainer within sandbox \"2aa1b1d1ae25fed8033a7a1250b89f0d2a6fca16823c1a82898054e63b907376\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"91d526fff1cb7e7eceb7f27f9c8064e87355e369527e19a4d4fd5676ffe3b97b\"" Jul 11 00:26:32.299114 env[1213]: time="2025-07-11T00:26:32.297585154Z" level=info msg="StartContainer for \"91d526fff1cb7e7eceb7f27f9c8064e87355e369527e19a4d4fd5676ffe3b97b\"" Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.315000 audit: BPF prog-id=73 op=LOAD Jul 11 00:26:32.315000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.315000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1656 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396561623336313463386166643765323239616166326264636234 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1656 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396561623336313463386166643765323239616166326264636234 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit: BPF prog-id=74 op=LOAD Jul 11 00:26:32.316000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1656 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396561623336313463386166643765323239616166326264636234 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit: BPF prog-id=75 op=LOAD Jul 11 00:26:32.316000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1656 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396561623336313463386166643765323239616166326264636234 Jul 11 00:26:32.316000 audit: BPF prog-id=75 op=UNLOAD Jul 11 00:26:32.316000 audit: BPF prog-id=74 op=UNLOAD Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.316000 audit: BPF prog-id=76 op=LOAD Jul 11 00:26:32.316000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1656 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396561623336313463386166643765323239616166326264636234 Jul 11 00:26:32.324209 env[1213]: time="2025-07-11T00:26:32.324011208Z" level=info msg="CreateContainer within sandbox \"f021f23fce29db7ccdeda9526a18111c7e7aa9d13cfb9ca72336028deff380d3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"a764cf564ca8649b88a0ce4a6fc4def14be8a417b10a0316facbeac78b8a4fcc\"" Jul 11 00:26:32.324548 env[1213]: time="2025-07-11T00:26:32.324520229Z" level=info msg="StartContainer for \"a764cf564ca8649b88a0ce4a6fc4def14be8a417b10a0316facbeac78b8a4fcc\"" Jul 11 00:26:32.327811 systemd[1]: Started cri-containerd-91d526fff1cb7e7eceb7f27f9c8064e87355e369527e19a4d4fd5676ffe3b97b.scope. Jul 11 00:26:32.343983 systemd[1]: Started cri-containerd-a764cf564ca8649b88a0ce4a6fc4def14be8a417b10a0316facbeac78b8a4fcc.scope. Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.350000 audit: BPF prog-id=77 op=LOAD Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1655 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643532366666663163623765376563656237663237663963383036 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1655 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643532366666663163623765376563656237663237663963383036 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit: BPF prog-id=78 op=LOAD Jul 11 00:26:32.351000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1655 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643532366666663163623765376563656237663237663963383036 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit: BPF prog-id=79 op=LOAD Jul 11 00:26:32.351000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1655 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643532366666663163623765376563656237663237663963383036 Jul 11 00:26:32.351000 audit: BPF prog-id=79 op=UNLOAD Jul 11 00:26:32.351000 audit: BPF prog-id=78 op=UNLOAD Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.351000 audit: BPF prog-id=80 op=LOAD Jul 11 00:26:32.351000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1655 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643532366666663163623765376563656237663237663963383036 Jul 11 00:26:32.370311 env[1213]: time="2025-07-11T00:26:32.370254315Z" level=info msg="StartContainer for \"fc9eab3614c8afd7e229aaf2bdcb444249501763e984ae7012e7be43557c578a\" returns successfully" Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.371000 audit: BPF prog-id=81 op=LOAD Jul 11 00:26:32.372000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.372000 audit[1814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1657 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137363463663536346361383634396238386130636534613666633464 Jul 11 00:26:32.372000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.372000 audit[1814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1657 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137363463663536346361383634396238386130636534613666633464 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.373000 audit: BPF prog-id=82 op=LOAD Jul 11 00:26:32.373000 audit[1814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1657 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137363463663536346361383634396238386130636534613666633464 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit: BPF prog-id=83 op=LOAD Jul 11 00:26:32.374000 audit[1814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1657 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137363463663536346361383634396238386130636534613666633464 Jul 11 00:26:32.374000 audit: BPF prog-id=83 op=UNLOAD Jul 11 00:26:32.374000 audit: BPF prog-id=82 op=UNLOAD Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { perfmon } for pid=1814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit[1814]: AVC avc: denied { bpf } for pid=1814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:32.374000 audit: BPF prog-id=84 op=LOAD Jul 11 00:26:32.374000 audit[1814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1657 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:32.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137363463663536346361383634396238386130636534613666633464 Jul 11 00:26:32.397275 env[1213]: time="2025-07-11T00:26:32.397230216Z" level=info msg="StartContainer for \"91d526fff1cb7e7eceb7f27f9c8064e87355e369527e19a4d4fd5676ffe3b97b\" returns successfully" Jul 11 00:26:32.403829 env[1213]: time="2025-07-11T00:26:32.403791079Z" level=info msg="StartContainer for \"a764cf564ca8649b88a0ce4a6fc4def14be8a417b10a0316facbeac78b8a4fcc\" returns successfully" Jul 11 00:26:32.413771 kubelet[1598]: I0711 00:26:32.412066 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:26:32.413771 kubelet[1598]: E0711 00:26:32.412391 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.54:6443/api/v1/nodes\": dial tcp 10.0.0.54:6443: connect: connection refused" node="localhost" Jul 11 00:26:32.775279 kubelet[1598]: E0711 00:26:32.775244 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:32.775423 kubelet[1598]: E0711 00:26:32.775405 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:32.776195 kubelet[1598]: E0711 00:26:32.776165 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:32.776301 kubelet[1598]: E0711 00:26:32.776282 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:32.777304 kubelet[1598]: E0711 00:26:32.777275 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:32.777389 kubelet[1598]: E0711 00:26:32.777374 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:33.778842 kubelet[1598]: E0711 00:26:33.778803 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:33.778842 kubelet[1598]: E0711 00:26:33.778825 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:26:33.779240 kubelet[1598]: E0711 00:26:33.778937 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:33.779240 kubelet[1598]: E0711 00:26:33.778937 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:34.014281 kubelet[1598]: I0711 00:26:34.014244 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:26:34.175000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:34.175000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006a32630 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:26:34.175000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:26:34.175000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:34.175000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400a213a40 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:26:34.175000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:26:34.176000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:34.176000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006a32750 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:26:34.176000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:26:34.183000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:34.183000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=4003a76780 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:26:34.183000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:26:34.185000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:34.185000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4006ce11a0 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:26:34.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:26:34.185000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:34.185000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4008dd8030 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:26:34.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:26:34.289062 kubelet[1598]: I0711 00:26:34.289012 1598 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 11 00:26:34.289062 kubelet[1598]: E0711 00:26:34.289052 1598 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 11 00:26:34.347628 kubelet[1598]: I0711 00:26:34.347538 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:34.359119 kubelet[1598]: E0711 00:26:34.359073 1598 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:34.359119 kubelet[1598]: I0711 00:26:34.359104 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:34.360665 kubelet[1598]: E0711 00:26:34.360639 1598 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:34.360665 kubelet[1598]: I0711 00:26:34.360662 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:34.362181 kubelet[1598]: E0711 00:26:34.362151 1598 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:34.733151 kubelet[1598]: I0711 00:26:34.733117 1598 apiserver.go:52] "Watching apiserver" Jul 11 00:26:34.747479 kubelet[1598]: I0711 00:26:34.747435 1598 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 11 00:26:35.426000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:35.430403 kernel: kauditd_printk_skb: 585 callbacks suppressed Jul 11 00:26:35.430502 kernel: audit: type=1400 audit(1752193595.426:561): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:35.430532 kernel: audit: type=1300 audit(1752193595.426:561): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000b92000 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:35.426000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000b92000 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:35.426000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:35.436635 kernel: audit: type=1327 audit(1752193595.426:561): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:35.426000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:35.439400 kernel: audit: type=1400 audit(1752193595.426:562): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:35.439473 kernel: audit: type=1300 audit(1752193595.426:562): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000ff080 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:35.426000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000ff080 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:35.426000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:35.445473 kernel: audit: type=1327 audit(1752193595.426:562): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:35.641050 kubelet[1598]: I0711 00:26:35.640971 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:35.645535 kubelet[1598]: E0711 00:26:35.645508 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:35.780522 kubelet[1598]: E0711 00:26:35.780494 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:36.276763 systemd[1]: Reloading. Jul 11 00:26:36.336845 /usr/lib/systemd/system-generators/torcx-generator[1899]: time="2025-07-11T00:26:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:26:36.337217 /usr/lib/systemd/system-generators/torcx-generator[1899]: time="2025-07-11T00:26:36Z" level=info msg="torcx already run" Jul 11 00:26:36.388136 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:26:36.388156 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:26:36.404106 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.471541 kernel: audit: type=1400 audit(1752193596.467:563): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.471592 kernel: audit: type=1400 audit(1752193596.467:564): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.471614 kernel: audit: type=1400 audit(1752193596.467:565): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.475028 kernel: audit: type=1400 audit(1752193596.467:566): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit: BPF prog-id=85 op=LOAD Jul 11 00:26:36.469000 audit: BPF prog-id=61 op=UNLOAD Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.471000 audit: BPF prog-id=86 op=LOAD Jul 11 00:26:36.471000 audit: BPF prog-id=73 op=UNLOAD Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit: BPF prog-id=87 op=LOAD Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.474000 audit: BPF prog-id=88 op=LOAD Jul 11 00:26:36.474000 audit: BPF prog-id=46 op=UNLOAD Jul 11 00:26:36.474000 audit: BPF prog-id=47 op=UNLOAD Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.476000 audit: BPF prog-id=89 op=LOAD Jul 11 00:26:36.476000 audit: BPF prog-id=68 op=UNLOAD Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.477000 audit: BPF prog-id=90 op=LOAD Jul 11 00:26:36.477000 audit: BPF prog-id=48 op=UNLOAD Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit: BPF prog-id=91 op=LOAD Jul 11 00:26:36.478000 audit: BPF prog-id=49 op=UNLOAD Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit: BPF prog-id=92 op=LOAD Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.478000 audit: BPF prog-id=93 op=LOAD Jul 11 00:26:36.479000 audit: BPF prog-id=50 op=UNLOAD Jul 11 00:26:36.479000 audit: BPF prog-id=51 op=UNLOAD Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit: BPF prog-id=94 op=LOAD Jul 11 00:26:36.479000 audit: BPF prog-id=52 op=UNLOAD Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit: BPF prog-id=95 op=LOAD Jul 11 00:26:36.480000 audit: BPF prog-id=53 op=UNLOAD Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit: BPF prog-id=96 op=LOAD Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit: BPF prog-id=97 op=LOAD Jul 11 00:26:36.480000 audit: BPF prog-id=54 op=UNLOAD Jul 11 00:26:36.480000 audit: BPF prog-id=55 op=UNLOAD Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.480000 audit: BPF prog-id=98 op=LOAD Jul 11 00:26:36.480000 audit: BPF prog-id=81 op=UNLOAD Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.481000 audit: BPF prog-id=99 op=LOAD Jul 11 00:26:36.481000 audit: BPF prog-id=77 op=UNLOAD Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit: BPF prog-id=100 op=LOAD Jul 11 00:26:36.482000 audit: BPF prog-id=56 op=UNLOAD Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit: BPF prog-id=101 op=LOAD Jul 11 00:26:36.483000 audit: BPF prog-id=57 op=UNLOAD Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit: BPF prog-id=102 op=LOAD Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit: BPF prog-id=103 op=LOAD Jul 11 00:26:36.483000 audit: BPF prog-id=58 op=UNLOAD Jul 11 00:26:36.483000 audit: BPF prog-id=59 op=UNLOAD Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit: BPF prog-id=104 op=LOAD Jul 11 00:26:36.483000 audit: BPF prog-id=60 op=UNLOAD Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.484000 audit: BPF prog-id=105 op=LOAD Jul 11 00:26:36.484000 audit: BPF prog-id=65 op=UNLOAD Jul 11 00:26:36.493944 systemd[1]: Stopping kubelet.service... Jul 11 00:26:36.518525 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:26:36.518724 systemd[1]: Stopped kubelet.service. Jul 11 00:26:36.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:36.520657 systemd[1]: Starting kubelet.service... Jul 11 00:26:36.611718 systemd[1]: Started kubelet.service. Jul 11 00:26:36.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:36.644617 kubelet[1941]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:26:36.644617 kubelet[1941]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 11 00:26:36.644617 kubelet[1941]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:26:36.644957 kubelet[1941]: I0711 00:26:36.644664 1941 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:26:36.651617 kubelet[1941]: I0711 00:26:36.651575 1941 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 11 00:26:36.651617 kubelet[1941]: I0711 00:26:36.651608 1941 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:26:36.651925 kubelet[1941]: I0711 00:26:36.651900 1941 server.go:954] "Client rotation is on, will bootstrap in background" Jul 11 00:26:36.653182 kubelet[1941]: I0711 00:26:36.653158 1941 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 11 00:26:36.655325 kubelet[1941]: I0711 00:26:36.655300 1941 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:26:36.658857 kubelet[1941]: E0711 00:26:36.658826 1941 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:26:36.659008 kubelet[1941]: I0711 00:26:36.658992 1941 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:26:36.665907 kubelet[1941]: I0711 00:26:36.665845 1941 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:26:36.668634 kubelet[1941]: I0711 00:26:36.668596 1941 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:26:36.668873 kubelet[1941]: I0711 00:26:36.668705 1941 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:26:36.669044 kubelet[1941]: I0711 00:26:36.669030 1941 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:26:36.669107 kubelet[1941]: I0711 00:26:36.669098 1941 container_manager_linux.go:304] "Creating device plugin manager" Jul 11 00:26:36.669221 kubelet[1941]: I0711 00:26:36.669188 1941 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:26:36.669435 kubelet[1941]: I0711 00:26:36.669420 1941 kubelet.go:446] "Attempting to sync node with API server" Jul 11 00:26:36.669509 kubelet[1941]: I0711 00:26:36.669496 1941 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:26:36.669581 kubelet[1941]: I0711 00:26:36.669571 1941 kubelet.go:352] "Adding apiserver pod source" Jul 11 00:26:36.669652 kubelet[1941]: I0711 00:26:36.669641 1941 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:26:36.673579 kubelet[1941]: I0711 00:26:36.673548 1941 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:26:36.674091 kubelet[1941]: I0711 00:26:36.674065 1941 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 11 00:26:36.676136 kubelet[1941]: I0711 00:26:36.676114 1941 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 11 00:26:36.676288 kubelet[1941]: I0711 00:26:36.676275 1941 server.go:1287] "Started kubelet" Jul 11 00:26:36.676000 audit[1941]: AVC avc: denied { mac_admin } for pid=1941 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.676000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:26:36.676000 audit[1941]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a9b9e0 a1=4000bdc150 a2=4000a9b9b0 a3=25 items=0 ppid=1 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:36.676000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:26:36.678126 kubelet[1941]: I0711 00:26:36.677954 1941 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:26:36.678268 kubelet[1941]: I0711 00:26:36.678220 1941 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:26:36.677000 audit[1941]: AVC avc: denied { mac_admin } for pid=1941 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.677000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:26:36.677000 audit[1941]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a2a600 a1=4000bdc168 a2=4000a9ba70 a3=25 items=0 ppid=1 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:36.677000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:26:36.678561 kubelet[1941]: I0711 00:26:36.678539 1941 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:26:36.678631 kubelet[1941]: I0711 00:26:36.678553 1941 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 11 00:26:36.678732 kubelet[1941]: I0711 00:26:36.678721 1941 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:26:36.684664 kubelet[1941]: I0711 00:26:36.678604 1941 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:26:36.684664 kubelet[1941]: I0711 00:26:36.680857 1941 server.go:479] "Adding debug handlers to kubelet server" Jul 11 00:26:36.684664 kubelet[1941]: I0711 00:26:36.681777 1941 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:26:36.684664 kubelet[1941]: I0711 00:26:36.683296 1941 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 11 00:26:36.684664 kubelet[1941]: I0711 00:26:36.683400 1941 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 11 00:26:36.684664 kubelet[1941]: I0711 00:26:36.683531 1941 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:26:36.688849 kubelet[1941]: E0711 00:26:36.688766 1941 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:26:36.698624 kubelet[1941]: I0711 00:26:36.696047 1941 factory.go:221] Registration of the systemd container factory successfully Jul 11 00:26:36.698624 kubelet[1941]: I0711 00:26:36.696745 1941 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:26:36.698624 kubelet[1941]: I0711 00:26:36.697655 1941 factory.go:221] Registration of the containerd container factory successfully Jul 11 00:26:36.708986 kubelet[1941]: I0711 00:26:36.707695 1941 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 11 00:26:36.710663 kubelet[1941]: I0711 00:26:36.710625 1941 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 11 00:26:36.710663 kubelet[1941]: I0711 00:26:36.710654 1941 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 11 00:26:36.710778 kubelet[1941]: I0711 00:26:36.710676 1941 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 11 00:26:36.710778 kubelet[1941]: I0711 00:26:36.710685 1941 kubelet.go:2382] "Starting kubelet main sync loop" Jul 11 00:26:36.710778 kubelet[1941]: E0711 00:26:36.710742 1941 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:26:36.736577 kubelet[1941]: I0711 00:26:36.736548 1941 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 11 00:26:36.736577 kubelet[1941]: I0711 00:26:36.736571 1941 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 11 00:26:36.736746 kubelet[1941]: I0711 00:26:36.736594 1941 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:26:36.736785 kubelet[1941]: I0711 00:26:36.736768 1941 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 11 00:26:36.736814 kubelet[1941]: I0711 00:26:36.736784 1941 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 11 00:26:36.736814 kubelet[1941]: I0711 00:26:36.736802 1941 policy_none.go:49] "None policy: Start" Jul 11 00:26:36.736814 kubelet[1941]: I0711 00:26:36.736811 1941 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 11 00:26:36.736880 kubelet[1941]: I0711 00:26:36.736819 1941 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:26:36.736946 kubelet[1941]: I0711 00:26:36.736934 1941 state_mem.go:75] "Updated machine memory state" Jul 11 00:26:36.740423 kubelet[1941]: I0711 00:26:36.740394 1941 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 11 00:26:36.739000 audit[1941]: AVC avc: denied { mac_admin } for pid=1941 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:36.739000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:26:36.739000 audit[1941]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ed1b60 a1=4000846c00 a2=4000ed1b30 a3=25 items=0 ppid=1 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:36.739000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:26:36.740708 kubelet[1941]: I0711 00:26:36.740458 1941 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 11 00:26:36.743774 kubelet[1941]: I0711 00:26:36.743743 1941 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:26:36.743999 kubelet[1941]: I0711 00:26:36.743786 1941 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:26:36.744401 kubelet[1941]: I0711 00:26:36.744376 1941 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:26:36.745020 kubelet[1941]: E0711 00:26:36.744952 1941 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 11 00:26:36.811504 kubelet[1941]: I0711 00:26:36.811450 1941 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:36.811624 kubelet[1941]: I0711 00:26:36.811450 1941 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:36.811677 kubelet[1941]: I0711 00:26:36.811660 1941 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:36.817409 kubelet[1941]: E0711 00:26:36.817374 1941 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:36.847522 kubelet[1941]: I0711 00:26:36.847494 1941 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:26:36.854057 kubelet[1941]: I0711 00:26:36.854013 1941 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 11 00:26:36.854221 kubelet[1941]: I0711 00:26:36.854091 1941 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 11 00:26:36.885403 kubelet[1941]: I0711 00:26:36.885286 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/25529bd75e8bd997faf785116a06f3f5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"25529bd75e8bd997faf785116a06f3f5\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:36.885403 kubelet[1941]: I0711 00:26:36.885328 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:36.885403 kubelet[1941]: I0711 00:26:36.885350 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:36.885403 kubelet[1941]: I0711 00:26:36.885374 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:36.885403 kubelet[1941]: I0711 00:26:36.885392 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:36.885629 kubelet[1941]: I0711 00:26:36.885429 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/25529bd75e8bd997faf785116a06f3f5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"25529bd75e8bd997faf785116a06f3f5\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:36.885629 kubelet[1941]: I0711 00:26:36.885465 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/25529bd75e8bd997faf785116a06f3f5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"25529bd75e8bd997faf785116a06f3f5\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:36.885629 kubelet[1941]: I0711 00:26:36.885500 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:36.885629 kubelet[1941]: I0711 00:26:36.885543 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:26:37.117342 kubelet[1941]: E0711 00:26:37.117304 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:37.117519 kubelet[1941]: E0711 00:26:37.117498 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:37.117717 kubelet[1941]: E0711 00:26:37.117697 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:37.670747 kubelet[1941]: I0711 00:26:37.670685 1941 apiserver.go:52] "Watching apiserver" Jul 11 00:26:37.684273 kubelet[1941]: I0711 00:26:37.684232 1941 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 11 00:26:37.723106 kubelet[1941]: E0711 00:26:37.723063 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:37.723748 kubelet[1941]: I0711 00:26:37.723723 1941 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:37.724119 kubelet[1941]: I0711 00:26:37.724098 1941 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:37.732259 kubelet[1941]: E0711 00:26:37.731118 1941 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:26:37.732259 kubelet[1941]: E0711 00:26:37.731311 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:37.732259 kubelet[1941]: E0711 00:26:37.732138 1941 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 11 00:26:37.732447 kubelet[1941]: E0711 00:26:37.732295 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:37.753678 kubelet[1941]: I0711 00:26:37.753616 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.753598395 podStartE2EDuration="1.753598395s" podCreationTimestamp="2025-07-11 00:26:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:26:37.745031163 +0000 UTC m=+1.129423890" watchObservedRunningTime="2025-07-11 00:26:37.753598395 +0000 UTC m=+1.137991122" Jul 11 00:26:37.763783 kubelet[1941]: I0711 00:26:37.763709 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.763676984 podStartE2EDuration="2.763676984s" podCreationTimestamp="2025-07-11 00:26:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:26:37.753693732 +0000 UTC m=+1.138086459" watchObservedRunningTime="2025-07-11 00:26:37.763676984 +0000 UTC m=+1.148069711" Jul 11 00:26:37.763936 kubelet[1941]: I0711 00:26:37.763867 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.76386358 podStartE2EDuration="1.76386358s" podCreationTimestamp="2025-07-11 00:26:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:26:37.763859783 +0000 UTC m=+1.148252510" watchObservedRunningTime="2025-07-11 00:26:37.76386358 +0000 UTC m=+1.148256307" Jul 11 00:26:38.169000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 11 00:26:38.169000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000a80880 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:38.169000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:38.555000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:38.555000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e41000 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:38.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:38.555000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:38.555000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000adde00 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:38.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:38.556000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:38.556000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40000ff3a0 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:38.556000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:38.556000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:26:38.556000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40000ff3e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:26:38.556000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:26:38.724367 kubelet[1941]: E0711 00:26:38.724326 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:38.724959 kubelet[1941]: E0711 00:26:38.724933 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:39.899580 kubelet[1941]: E0711 00:26:39.899534 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:40.637843 kubelet[1941]: E0711 00:26:40.637794 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:42.779480 kubelet[1941]: I0711 00:26:42.779435 1941 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 11 00:26:42.779804 env[1213]: time="2025-07-11T00:26:42.779755764Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 11 00:26:42.780157 kubelet[1941]: I0711 00:26:42.780116 1941 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 11 00:26:43.726432 systemd[1]: Created slice kubepods-besteffort-pod85081fb4_8ba5_4297_bf3d_0842a66f0bbe.slice. Jul 11 00:26:43.737325 kubelet[1941]: I0711 00:26:43.737287 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85081fb4-8ba5-4297-bf3d-0842a66f0bbe-xtables-lock\") pod \"kube-proxy-c7s9h\" (UID: \"85081fb4-8ba5-4297-bf3d-0842a66f0bbe\") " pod="kube-system/kube-proxy-c7s9h" Jul 11 00:26:43.737532 kubelet[1941]: I0711 00:26:43.737513 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85081fb4-8ba5-4297-bf3d-0842a66f0bbe-lib-modules\") pod \"kube-proxy-c7s9h\" (UID: \"85081fb4-8ba5-4297-bf3d-0842a66f0bbe\") " pod="kube-system/kube-proxy-c7s9h" Jul 11 00:26:43.737622 kubelet[1941]: I0711 00:26:43.737606 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-82zlb\" (UniqueName: \"kubernetes.io/projected/85081fb4-8ba5-4297-bf3d-0842a66f0bbe-kube-api-access-82zlb\") pod \"kube-proxy-c7s9h\" (UID: \"85081fb4-8ba5-4297-bf3d-0842a66f0bbe\") " pod="kube-system/kube-proxy-c7s9h" Jul 11 00:26:43.737702 kubelet[1941]: I0711 00:26:43.737689 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/85081fb4-8ba5-4297-bf3d-0842a66f0bbe-kube-proxy\") pod \"kube-proxy-c7s9h\" (UID: \"85081fb4-8ba5-4297-bf3d-0842a66f0bbe\") " pod="kube-system/kube-proxy-c7s9h" Jul 11 00:26:43.847026 kubelet[1941]: I0711 00:26:43.846984 1941 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 11 00:26:43.891133 systemd[1]: Created slice kubepods-besteffort-pod1439d5e4_6f01_482e_8253_ff8a4d92d744.slice. Jul 11 00:26:43.942345 kubelet[1941]: I0711 00:26:43.942294 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1439d5e4-6f01-482e-8253-ff8a4d92d744-var-lib-calico\") pod \"tigera-operator-747864d56d-6dptj\" (UID: \"1439d5e4-6f01-482e-8253-ff8a4d92d744\") " pod="tigera-operator/tigera-operator-747864d56d-6dptj" Jul 11 00:26:43.942345 kubelet[1941]: I0711 00:26:43.942343 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7n8vg\" (UniqueName: \"kubernetes.io/projected/1439d5e4-6f01-482e-8253-ff8a4d92d744-kube-api-access-7n8vg\") pod \"tigera-operator-747864d56d-6dptj\" (UID: \"1439d5e4-6f01-482e-8253-ff8a4d92d744\") " pod="tigera-operator/tigera-operator-747864d56d-6dptj" Jul 11 00:26:44.034510 kubelet[1941]: E0711 00:26:44.034447 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:44.035266 env[1213]: time="2025-07-11T00:26:44.035223392Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-c7s9h,Uid:85081fb4-8ba5-4297-bf3d-0842a66f0bbe,Namespace:kube-system,Attempt:0,}" Jul 11 00:26:44.049795 env[1213]: time="2025-07-11T00:26:44.049713433Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:44.049795 env[1213]: time="2025-07-11T00:26:44.049759836Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:44.049795 env[1213]: time="2025-07-11T00:26:44.049772517Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:44.049959 env[1213]: time="2025-07-11T00:26:44.049905406Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/29eb24ae8fc1bf593a44a2dbbe182022ddf114387d22b16bca078dcfef52fc34 pid=1998 runtime=io.containerd.runc.v2 Jul 11 00:26:44.068125 systemd[1]: Started cri-containerd-29eb24ae8fc1bf593a44a2dbbe182022ddf114387d22b16bca078dcfef52fc34.scope. Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.110790 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 11 00:26:44.110847 kernel: audit: type=1400 audit(1752193604.108:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.110886 kernel: audit: type=1400 audit(1752193604.108:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.112672 kernel: audit: type=1400 audit(1752193604.108:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.114414 kernel: audit: type=1400 audit(1752193604.108:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.118046 kernel: audit: type=1400 audit(1752193604.108:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.118115 kernel: audit: type=1400 audit(1752193604.108:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.121757 kernel: audit: type=1400 audit(1752193604.108:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.121807 kernel: audit: type=1400 audit(1752193604.108:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.123722 kernel: audit: type=1400 audit(1752193604.108:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.126153 kernel: audit: type=1400 audit(1752193604.108:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit: BPF prog-id=106 op=LOAD Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239656232346165386663316266353933613434613264626265313832 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239656232346165386663316266353933613434613264626265313832 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.108000 audit: BPF prog-id=107 op=LOAD Jul 11 00:26:44.108000 audit[2007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239656232346165386663316266353933613434613264626265313832 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.109000 audit: BPF prog-id=108 op=LOAD Jul 11 00:26:44.109000 audit[2007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239656232346165386663316266353933613434613264626265313832 Jul 11 00:26:44.111000 audit: BPF prog-id=108 op=UNLOAD Jul 11 00:26:44.111000 audit: BPF prog-id=107 op=UNLOAD Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.111000 audit: BPF prog-id=109 op=LOAD Jul 11 00:26:44.111000 audit[2007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239656232346165386663316266353933613434613264626265313832 Jul 11 00:26:44.135437 env[1213]: time="2025-07-11T00:26:44.135395282Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-c7s9h,Uid:85081fb4-8ba5-4297-bf3d-0842a66f0bbe,Namespace:kube-system,Attempt:0,} returns sandbox id \"29eb24ae8fc1bf593a44a2dbbe182022ddf114387d22b16bca078dcfef52fc34\"" Jul 11 00:26:44.136113 kubelet[1941]: E0711 00:26:44.136080 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:44.138756 env[1213]: time="2025-07-11T00:26:44.138723253Z" level=info msg="CreateContainer within sandbox \"29eb24ae8fc1bf593a44a2dbbe182022ddf114387d22b16bca078dcfef52fc34\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 11 00:26:44.150731 env[1213]: time="2025-07-11T00:26:44.150676933Z" level=info msg="CreateContainer within sandbox \"29eb24ae8fc1bf593a44a2dbbe182022ddf114387d22b16bca078dcfef52fc34\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"11ed2fd41ca6d25f3afe8c3414cf638593136cd1976acf7e94ccb5915ca47f62\"" Jul 11 00:26:44.151556 env[1213]: time="2025-07-11T00:26:44.151525387Z" level=info msg="StartContainer for \"11ed2fd41ca6d25f3afe8c3414cf638593136cd1976acf7e94ccb5915ca47f62\"" Jul 11 00:26:44.171056 systemd[1]: Started cri-containerd-11ed2fd41ca6d25f3afe8c3414cf638593136cd1976acf7e94ccb5915ca47f62.scope. Jul 11 00:26:44.194105 env[1213]: time="2025-07-11T00:26:44.194053892Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-6dptj,Uid:1439d5e4-6f01-482e-8253-ff8a4d92d744,Namespace:tigera-operator,Attempt:0,}" Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656432666434316361366432356633616665386333343134636636 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit: BPF prog-id=110 op=LOAD Jul 11 00:26:44.195000 audit[2040]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656432666434316361366432356633616665386333343134636636 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.195000 audit: BPF prog-id=111 op=LOAD Jul 11 00:26:44.195000 audit[2040]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656432666434316361366432356633616665386333343134636636 Jul 11 00:26:44.196000 audit: BPF prog-id=111 op=UNLOAD Jul 11 00:26:44.196000 audit: BPF prog-id=110 op=UNLOAD Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.196000 audit: BPF prog-id=112 op=LOAD Jul 11 00:26:44.196000 audit[2040]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656432666434316361366432356633616665386333343134636636 Jul 11 00:26:44.208833 env[1213]: time="2025-07-11T00:26:44.208787788Z" level=info msg="StartContainer for \"11ed2fd41ca6d25f3afe8c3414cf638593136cd1976acf7e94ccb5915ca47f62\" returns successfully" Jul 11 00:26:44.211620 env[1213]: time="2025-07-11T00:26:44.211540843Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:44.211820 env[1213]: time="2025-07-11T00:26:44.211599327Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:44.211820 env[1213]: time="2025-07-11T00:26:44.211616168Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:44.211918 env[1213]: time="2025-07-11T00:26:44.211830342Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353 pid=2069 runtime=io.containerd.runc.v2 Jul 11 00:26:44.227007 systemd[1]: Started cri-containerd-1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353.scope. Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit: BPF prog-id=113 op=LOAD Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2069 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163343036636635316531666564323037623263396637373166333037 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2069 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163343036636635316531666564323037623263396637373166333037 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit: BPF prog-id=114 op=LOAD Jul 11 00:26:44.251000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2069 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163343036636635316531666564323037623263396637373166333037 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit: BPF prog-id=115 op=LOAD Jul 11 00:26:44.251000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2069 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163343036636635316531666564323037623263396637373166333037 Jul 11 00:26:44.251000 audit: BPF prog-id=115 op=UNLOAD Jul 11 00:26:44.251000 audit: BPF prog-id=114 op=UNLOAD Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:44.251000 audit: BPF prog-id=116 op=LOAD Jul 11 00:26:44.251000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2069 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163343036636635316531666564323037623263396637373166333037 Jul 11 00:26:44.270672 env[1213]: time="2025-07-11T00:26:44.270624040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-6dptj,Uid:1439d5e4-6f01-482e-8253-ff8a4d92d744,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353\"" Jul 11 00:26:44.274854 env[1213]: time="2025-07-11T00:26:44.274817587Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 11 00:26:44.307671 kubelet[1941]: E0711 00:26:44.307289 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:44.452000 audit[2142]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.452000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc07053e0 a2=0 a3=1 items=0 ppid=2050 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:26:44.453000 audit[2144]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.453000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf246c30 a2=0 a3=1 items=0 ppid=2050 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:26:44.454000 audit[2141]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.454000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe81d1870 a2=0 a3=1 items=0 ppid=2050 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:26:44.455000 audit[2146]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.455000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7b3a460 a2=0 a3=1 items=0 ppid=2050 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:26:44.455000 audit[2145]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.455000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff07e3a20 a2=0 a3=1 items=0 ppid=2050 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:26:44.456000 audit[2147]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.456000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6cd7510 a2=0 a3=1 items=0 ppid=2050 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:26:44.554000 audit[2148]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.554000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffbe5ee20 a2=0 a3=1 items=0 ppid=2050 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.554000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:26:44.558000 audit[2150]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.558000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff2610090 a2=0 a3=1 items=0 ppid=2050 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.558000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 11 00:26:44.562000 audit[2153]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.562000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffea82b7b0 a2=0 a3=1 items=0 ppid=2050 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 11 00:26:44.563000 audit[2154]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.563000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc087f670 a2=0 a3=1 items=0 ppid=2050 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.563000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:26:44.565000 audit[2156]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.565000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd6cba5b0 a2=0 a3=1 items=0 ppid=2050 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:26:44.566000 audit[2157]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.566000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc24d46e0 a2=0 a3=1 items=0 ppid=2050 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:26:44.568000 audit[2159]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.568000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe824c0c0 a2=0 a3=1 items=0 ppid=2050 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:26:44.571000 audit[2162]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.571000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd6b40f20 a2=0 a3=1 items=0 ppid=2050 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 11 00:26:44.572000 audit[2163]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.572000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff70c60d0 a2=0 a3=1 items=0 ppid=2050 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:26:44.575000 audit[2165]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.575000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe963b610 a2=0 a3=1 items=0 ppid=2050 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:26:44.576000 audit[2166]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.576000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdad08db0 a2=0 a3=1 items=0 ppid=2050 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.576000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:26:44.578000 audit[2168]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.578000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd4fb6410 a2=0 a3=1 items=0 ppid=2050 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.578000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:26:44.581000 audit[2171]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.581000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe30709d0 a2=0 a3=1 items=0 ppid=2050 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:26:44.585000 audit[2174]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.585000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdeac43a0 a2=0 a3=1 items=0 ppid=2050 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.585000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:26:44.586000 audit[2175]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.586000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff2487ea0 a2=0 a3=1 items=0 ppid=2050 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:26:44.588000 audit[2177]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.588000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff0090660 a2=0 a3=1 items=0 ppid=2050 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:26:44.591000 audit[2180]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.591000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdf87da50 a2=0 a3=1 items=0 ppid=2050 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.591000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:26:44.592000 audit[2181]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.592000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff446b280 a2=0 a3=1 items=0 ppid=2050 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.592000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:26:44.595000 audit[2183]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:26:44.595000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcb42b880 a2=0 a3=1 items=0 ppid=2050 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.595000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:26:44.618000 audit[2189]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:44.618000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcb0b6610 a2=0 a3=1 items=0 ppid=2050 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.618000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:44.630000 audit[2189]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:44.630000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffcb0b6610 a2=0 a3=1 items=0 ppid=2050 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:44.631000 audit[2194]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.631000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe7c98190 a2=0 a3=1 items=0 ppid=2050 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.631000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:26:44.634000 audit[2196]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.634000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe1c446d0 a2=0 a3=1 items=0 ppid=2050 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.634000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 11 00:26:44.638000 audit[2199]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.638000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd001adf0 a2=0 a3=1 items=0 ppid=2050 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.638000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 11 00:26:44.639000 audit[2200]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.639000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8d22a90 a2=0 a3=1 items=0 ppid=2050 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.639000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:26:44.642000 audit[2202]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.642000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc271ddf0 a2=0 a3=1 items=0 ppid=2050 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:26:44.643000 audit[2203]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.643000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9207df0 a2=0 a3=1 items=0 ppid=2050 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.643000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:26:44.645000 audit[2205]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.645000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff477a5f0 a2=0 a3=1 items=0 ppid=2050 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 11 00:26:44.649000 audit[2208]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.649000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc180d5b0 a2=0 a3=1 items=0 ppid=2050 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:26:44.650000 audit[2209]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.650000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc06e680 a2=0 a3=1 items=0 ppid=2050 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.650000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:26:44.652000 audit[2211]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.652000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7afa640 a2=0 a3=1 items=0 ppid=2050 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.652000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:26:44.653000 audit[2212]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.653000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6373e70 a2=0 a3=1 items=0 ppid=2050 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.653000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:26:44.655000 audit[2214]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.655000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff65cbb70 a2=0 a3=1 items=0 ppid=2050 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.655000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:26:44.659000 audit[2217]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.659000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd13cd620 a2=0 a3=1 items=0 ppid=2050 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.659000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:26:44.662000 audit[2220]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.662000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc8844910 a2=0 a3=1 items=0 ppid=2050 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.662000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 11 00:26:44.663000 audit[2221]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.663000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcac3fb90 a2=0 a3=1 items=0 ppid=2050 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:26:44.665000 audit[2223]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.665000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff60e1e70 a2=0 a3=1 items=0 ppid=2050 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.665000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:26:44.668000 audit[2226]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.668000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc9276820 a2=0 a3=1 items=0 ppid=2050 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.668000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:26:44.669000 audit[2227]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.669000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff836d5f0 a2=0 a3=1 items=0 ppid=2050 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.669000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:26:44.671000 audit[2229]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.671000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff419c710 a2=0 a3=1 items=0 ppid=2050 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:26:44.672000 audit[2230]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.672000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2d9a920 a2=0 a3=1 items=0 ppid=2050 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.672000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:26:44.674000 audit[2232]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.674000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdb29dc60 a2=0 a3=1 items=0 ppid=2050 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.674000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:26:44.677000 audit[2235]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:26:44.677000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeb0c6360 a2=0 a3=1 items=0 ppid=2050 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.677000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:26:44.680000 audit[2237]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:26:44.680000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffff088b550 a2=0 a3=1 items=0 ppid=2050 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.680000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:44.680000 audit[2237]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:26:44.680000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffff088b550 a2=0 a3=1 items=0 ppid=2050 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:44.680000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:44.735685 kubelet[1941]: E0711 00:26:44.735654 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:44.736591 kubelet[1941]: E0711 00:26:44.736557 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:44.753085 kubelet[1941]: I0711 00:26:44.753019 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-c7s9h" podStartSLOduration=1.753002553 podStartE2EDuration="1.753002553s" podCreationTimestamp="2025-07-11 00:26:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:26:44.752817021 +0000 UTC m=+8.137209748" watchObservedRunningTime="2025-07-11 00:26:44.753002553 +0000 UTC m=+8.137395280" Jul 11 00:26:44.852973 systemd[1]: run-containerd-runc-k8s.io-29eb24ae8fc1bf593a44a2dbbe182022ddf114387d22b16bca078dcfef52fc34-runc.fSWdQh.mount: Deactivated successfully. Jul 11 00:26:45.263987 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2387581177.mount: Deactivated successfully. Jul 11 00:26:45.822266 env[1213]: time="2025-07-11T00:26:45.822221816Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:45.823490 env[1213]: time="2025-07-11T00:26:45.823438169Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:45.825537 env[1213]: time="2025-07-11T00:26:45.825499293Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:45.828947 env[1213]: time="2025-07-11T00:26:45.828912298Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:45.829463 env[1213]: time="2025-07-11T00:26:45.829428689Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 11 00:26:45.833283 env[1213]: time="2025-07-11T00:26:45.833249839Z" level=info msg="CreateContainer within sandbox \"1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 11 00:26:45.843720 env[1213]: time="2025-07-11T00:26:45.843656505Z" level=info msg="CreateContainer within sandbox \"1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e\"" Jul 11 00:26:45.845605 env[1213]: time="2025-07-11T00:26:45.844241660Z" level=info msg="StartContainer for \"9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e\"" Jul 11 00:26:45.873162 systemd[1]: run-containerd-runc-k8s.io-9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e-runc.Ffgtlm.mount: Deactivated successfully. Jul 11 00:26:45.875308 systemd[1]: Started cri-containerd-9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e.scope. Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit: BPF prog-id=117 op=LOAD Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2069 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:45.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961643432343236333134386563643562633464616536633862356138 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2069 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:45.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961643432343236333134386563643562633464616536633862356138 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit: BPF prog-id=118 op=LOAD Jul 11 00:26:45.893000 audit[2246]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2069 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:45.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961643432343236333134386563643562633464616536633862356138 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit: BPF prog-id=119 op=LOAD Jul 11 00:26:45.893000 audit[2246]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2069 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:45.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961643432343236333134386563643562633464616536633862356138 Jul 11 00:26:45.893000 audit: BPF prog-id=119 op=UNLOAD Jul 11 00:26:45.893000 audit: BPF prog-id=118 op=UNLOAD Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { perfmon } for pid=2246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit[2246]: AVC avc: denied { bpf } for pid=2246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:45.893000 audit: BPF prog-id=120 op=LOAD Jul 11 00:26:45.893000 audit[2246]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2069 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:45.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961643432343236333134386563643562633464616536633862356138 Jul 11 00:26:45.906886 env[1213]: time="2025-07-11T00:26:45.906814425Z" level=info msg="StartContainer for \"9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e\" returns successfully" Jul 11 00:26:48.024000 audit: BPF prog-id=117 op=UNLOAD Jul 11 00:26:48.025040 systemd[1]: cri-containerd-9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e.scope: Deactivated successfully. Jul 11 00:26:48.029000 audit: BPF prog-id=120 op=UNLOAD Jul 11 00:26:48.049910 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e-rootfs.mount: Deactivated successfully. Jul 11 00:26:48.157747 env[1213]: time="2025-07-11T00:26:48.157698580Z" level=info msg="shim disconnected" id=9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e Jul 11 00:26:48.157747 env[1213]: time="2025-07-11T00:26:48.157743663Z" level=warning msg="cleaning up after shim disconnected" id=9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e namespace=k8s.io Jul 11 00:26:48.157747 env[1213]: time="2025-07-11T00:26:48.157754063Z" level=info msg="cleaning up dead shim" Jul 11 00:26:48.175281 env[1213]: time="2025-07-11T00:26:48.175235597Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:26:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2291 runtime=io.containerd.runc.v2\n" Jul 11 00:26:48.745991 kubelet[1941]: I0711 00:26:48.745951 1941 scope.go:117] "RemoveContainer" containerID="9ad424263148ecd5bc4dae6c8b5a87692d514212ddeef1300abd064f772fc79e" Jul 11 00:26:48.749399 env[1213]: time="2025-07-11T00:26:48.749346794Z" level=info msg="CreateContainer within sandbox \"1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 11 00:26:48.768214 env[1213]: time="2025-07-11T00:26:48.768166797Z" level=info msg="CreateContainer within sandbox \"1c406cf51e1fed207b2c9f771f307946f5f3aa93c12eaa6b5d3aba368a309353\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"6fb8bc0f23a11f8448e9b864e28c44a5ff9df5c645424762859f8633b13c893c\"" Jul 11 00:26:48.769035 env[1213]: time="2025-07-11T00:26:48.769004239Z" level=info msg="StartContainer for \"6fb8bc0f23a11f8448e9b864e28c44a5ff9df5c645424762859f8633b13c893c\"" Jul 11 00:26:48.789610 systemd[1]: Started cri-containerd-6fb8bc0f23a11f8448e9b864e28c44a5ff9df5c645424762859f8633b13c893c.scope. Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.833000 audit: BPF prog-id=121 op=LOAD Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2069 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:48.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666623862633066323361313166383434386539623836346532386334 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2069 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:48.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666623862633066323361313166383434386539623836346532386334 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit: BPF prog-id=122 op=LOAD Jul 11 00:26:48.834000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2069 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:48.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666623862633066323361313166383434386539623836346532386334 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit: BPF prog-id=123 op=LOAD Jul 11 00:26:48.834000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2069 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:48.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666623862633066323361313166383434386539623836346532386334 Jul 11 00:26:48.834000 audit: BPF prog-id=123 op=UNLOAD Jul 11 00:26:48.834000 audit: BPF prog-id=122 op=UNLOAD Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:48.834000 audit: BPF prog-id=124 op=LOAD Jul 11 00:26:48.834000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2069 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:48.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666623862633066323361313166383434386539623836346532386334 Jul 11 00:26:48.849945 env[1213]: time="2025-07-11T00:26:48.849876535Z" level=info msg="StartContainer for \"6fb8bc0f23a11f8448e9b864e28c44a5ff9df5c645424762859f8633b13c893c\" returns successfully" Jul 11 00:26:49.756197 kubelet[1941]: I0711 00:26:49.756125 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-6dptj" podStartSLOduration=5.198323579 podStartE2EDuration="6.75610588s" podCreationTimestamp="2025-07-11 00:26:43 +0000 UTC" firstStartedPulling="2025-07-11 00:26:44.272682731 +0000 UTC m=+7.657075458" lastFinishedPulling="2025-07-11 00:26:45.830465032 +0000 UTC m=+9.214857759" observedRunningTime="2025-07-11 00:26:46.752645347 +0000 UTC m=+10.137038074" watchObservedRunningTime="2025-07-11 00:26:49.75610588 +0000 UTC m=+13.140498607" Jul 11 00:26:49.907152 kubelet[1941]: E0711 00:26:49.907115 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:50.645463 kubelet[1941]: E0711 00:26:50.645421 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:50.749824 kubelet[1941]: E0711 00:26:50.749795 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:51.422711 sudo[1350]: pam_unix(sudo:session): session closed for user root Jul 11 00:26:51.421000 audit[1350]: USER_END pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:51.423321 kernel: kauditd_printk_skb: 416 callbacks suppressed Jul 11 00:26:51.423380 kernel: audit: type=1106 audit(1752193611.421:948): pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:51.421000 audit[1350]: CRED_DISP pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:51.427534 kernel: audit: type=1104 audit(1752193611.421:949): pid=1350 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:26:51.429547 sshd[1346]: pam_unix(sshd:session): session closed for user core Jul 11 00:26:51.429000 audit[1346]: USER_END pid=1346 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:51.430000 audit[1346]: CRED_DISP pid=1346 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:51.432736 systemd[1]: sshd@6-10.0.0.54:22-10.0.0.1:40792.service: Deactivated successfully. Jul 11 00:26:51.433446 systemd[1]: session-7.scope: Deactivated successfully. Jul 11 00:26:51.433592 systemd[1]: session-7.scope: Consumed 6.773s CPU time. Jul 11 00:26:51.435304 kernel: audit: type=1106 audit(1752193611.429:950): pid=1346 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:51.435359 kernel: audit: type=1104 audit(1752193611.430:951): pid=1346 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:26:51.435338 systemd-logind[1202]: Session 7 logged out. Waiting for processes to exit. Jul 11 00:26:51.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.54:22-10.0.0.1:40792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:51.437684 kernel: audit: type=1131 audit(1752193611.431:952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.54:22-10.0.0.1:40792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:26:51.437953 systemd-logind[1202]: Removed session 7. Jul 11 00:26:52.555000 audit[2396]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:52.559229 kernel: audit: type=1325 audit(1752193612.555:953): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:52.555000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd0c13f10 a2=0 a3=1 items=0 ppid=2050 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:52.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:52.565254 kernel: audit: type=1300 audit(1752193612.555:953): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd0c13f10 a2=0 a3=1 items=0 ppid=2050 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:52.565340 kernel: audit: type=1327 audit(1752193612.555:953): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:52.571000 audit[2396]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:52.571000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd0c13f10 a2=0 a3=1 items=0 ppid=2050 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:52.577139 kernel: audit: type=1325 audit(1752193612.571:954): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:52.577236 kernel: audit: type=1300 audit(1752193612.571:954): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd0c13f10 a2=0 a3=1 items=0 ppid=2050 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:52.571000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:52.597000 audit[2398]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:52.597000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe97c3900 a2=0 a3=1 items=0 ppid=2050 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:52.597000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:52.605000 audit[2398]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:52.605000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe97c3900 a2=0 a3=1 items=0 ppid=2050 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:52.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:52.982431 update_engine[1205]: I0711 00:26:52.982306 1205 update_attempter.cc:509] Updating boot flags... Jul 11 00:26:55.001000 audit[2416]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:55.001000 audit[2416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdf438910 a2=0 a3=1 items=0 ppid=2050 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.001000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:55.008000 audit[2416]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:55.008000 audit[2416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf438910 a2=0 a3=1 items=0 ppid=2050 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:55.024000 audit[2418]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2418 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:55.024000 audit[2418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff8ca7520 a2=0 a3=1 items=0 ppid=2050 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:55.029177 systemd[1]: Created slice kubepods-besteffort-pod003b61d8_719c_4a4e_ac24_625f0ec0a76a.slice. Jul 11 00:26:55.033000 audit[2418]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2418 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:55.033000 audit[2418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff8ca7520 a2=0 a3=1 items=0 ppid=2050 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.033000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:55.115509 kubelet[1941]: I0711 00:26:55.115471 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/003b61d8-719c-4a4e-ac24-625f0ec0a76a-typha-certs\") pod \"calico-typha-7f9d4fcbdc-4whrj\" (UID: \"003b61d8-719c-4a4e-ac24-625f0ec0a76a\") " pod="calico-system/calico-typha-7f9d4fcbdc-4whrj" Jul 11 00:26:55.115956 kubelet[1941]: I0711 00:26:55.115925 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dlzsp\" (UniqueName: \"kubernetes.io/projected/003b61d8-719c-4a4e-ac24-625f0ec0a76a-kube-api-access-dlzsp\") pod \"calico-typha-7f9d4fcbdc-4whrj\" (UID: \"003b61d8-719c-4a4e-ac24-625f0ec0a76a\") " pod="calico-system/calico-typha-7f9d4fcbdc-4whrj" Jul 11 00:26:55.116060 kubelet[1941]: I0711 00:26:55.116046 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/003b61d8-719c-4a4e-ac24-625f0ec0a76a-tigera-ca-bundle\") pod \"calico-typha-7f9d4fcbdc-4whrj\" (UID: \"003b61d8-719c-4a4e-ac24-625f0ec0a76a\") " pod="calico-system/calico-typha-7f9d4fcbdc-4whrj" Jul 11 00:26:55.299668 systemd[1]: Created slice kubepods-besteffort-pod00c04cf7_3bde_4e22_b527_8ad3625b49f5.slice. Jul 11 00:26:55.317339 kubelet[1941]: I0711 00:26:55.317297 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-var-run-calico\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317495 kubelet[1941]: I0711 00:26:55.317350 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-cni-log-dir\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317495 kubelet[1941]: I0711 00:26:55.317370 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-cni-net-dir\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317495 kubelet[1941]: I0711 00:26:55.317387 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-flexvol-driver-host\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317495 kubelet[1941]: I0711 00:26:55.317404 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-var-lib-calico\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317495 kubelet[1941]: I0711 00:26:55.317420 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-lib-modules\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317623 kubelet[1941]: I0711 00:26:55.317437 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/00c04cf7-3bde-4e22-b527-8ad3625b49f5-node-certs\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317623 kubelet[1941]: I0711 00:26:55.317451 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-xtables-lock\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317623 kubelet[1941]: I0711 00:26:55.317470 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-cni-bin-dir\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317623 kubelet[1941]: I0711 00:26:55.317492 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/00c04cf7-3bde-4e22-b527-8ad3625b49f5-tigera-ca-bundle\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317623 kubelet[1941]: I0711 00:26:55.317507 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4trt4\" (UniqueName: \"kubernetes.io/projected/00c04cf7-3bde-4e22-b527-8ad3625b49f5-kube-api-access-4trt4\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.317737 kubelet[1941]: I0711 00:26:55.317523 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/00c04cf7-3bde-4e22-b527-8ad3625b49f5-policysync\") pod \"calico-node-wd24c\" (UID: \"00c04cf7-3bde-4e22-b527-8ad3625b49f5\") " pod="calico-system/calico-node-wd24c" Jul 11 00:26:55.331389 kubelet[1941]: E0711 00:26:55.331352 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:55.331971 env[1213]: time="2025-07-11T00:26:55.331919295Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7f9d4fcbdc-4whrj,Uid:003b61d8-719c-4a4e-ac24-625f0ec0a76a,Namespace:calico-system,Attempt:0,}" Jul 11 00:26:55.365854 env[1213]: time="2025-07-11T00:26:55.365791426Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:55.366030 env[1213]: time="2025-07-11T00:26:55.365878269Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:55.366030 env[1213]: time="2025-07-11T00:26:55.365933351Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:55.366262 env[1213]: time="2025-07-11T00:26:55.366223642Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69437664529fcc2e6c007b2e79e61592527ea43916dd053f79766b2f10fde648 pid=2427 runtime=io.containerd.runc.v2 Jul 11 00:26:55.384812 systemd[1]: Started cri-containerd-69437664529fcc2e6c007b2e79e61592527ea43916dd053f79766b2f10fde648.scope. Jul 11 00:26:55.420343 kubelet[1941]: E0711 00:26:55.420312 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.420343 kubelet[1941]: W0711 00:26:55.420335 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.422220 kubelet[1941]: E0711 00:26:55.422188 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.422396 kubelet[1941]: W0711 00:26:55.422338 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.422586 kubelet[1941]: E0711 00:26:55.422561 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.422662 kubelet[1941]: E0711 00:26:55.422564 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.431042 kubelet[1941]: E0711 00:26:55.431003 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.431042 kubelet[1941]: W0711 00:26:55.431034 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.431192 kubelet[1941]: E0711 00:26:55.431055 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.430000 audit: BPF prog-id=125 op=LOAD Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2427 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639343337363634353239666363326536633030376232653739653631 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2427 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639343337363634353239666363326536633030376232653739653631 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit: BPF prog-id=126 op=LOAD Jul 11 00:26:55.431000 audit[2436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2427 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639343337363634353239666363326536633030376232653739653631 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit: BPF prog-id=127 op=LOAD Jul 11 00:26:55.431000 audit[2436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2427 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639343337363634353239666363326536633030376232653739653631 Jul 11 00:26:55.431000 audit: BPF prog-id=127 op=UNLOAD Jul 11 00:26:55.431000 audit: BPF prog-id=126 op=UNLOAD Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.431000 audit: BPF prog-id=128 op=LOAD Jul 11 00:26:55.431000 audit[2436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2427 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639343337363634353239666363326536633030376232653739653631 Jul 11 00:26:55.453885 env[1213]: time="2025-07-11T00:26:55.453833975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7f9d4fcbdc-4whrj,Uid:003b61d8-719c-4a4e-ac24-625f0ec0a76a,Namespace:calico-system,Attempt:0,} returns sandbox id \"69437664529fcc2e6c007b2e79e61592527ea43916dd053f79766b2f10fde648\"" Jul 11 00:26:55.454836 kubelet[1941]: E0711 00:26:55.454601 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:55.455943 env[1213]: time="2025-07-11T00:26:55.455904809Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 11 00:26:55.536172 kubelet[1941]: E0711 00:26:55.536121 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:26:55.602429 env[1213]: time="2025-07-11T00:26:55.602313606Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wd24c,Uid:00c04cf7-3bde-4e22-b527-8ad3625b49f5,Namespace:calico-system,Attempt:0,}" Jul 11 00:26:55.605666 kubelet[1941]: E0711 00:26:55.605639 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.605666 kubelet[1941]: W0711 00:26:55.605662 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.605787 kubelet[1941]: E0711 00:26:55.605682 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606092 kubelet[1941]: E0711 00:26:55.605843 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606092 kubelet[1941]: W0711 00:26:55.605851 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606092 kubelet[1941]: E0711 00:26:55.605889 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606092 kubelet[1941]: E0711 00:26:55.606051 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606092 kubelet[1941]: W0711 00:26:55.606060 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606092 kubelet[1941]: E0711 00:26:55.606072 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606384 kubelet[1941]: E0711 00:26:55.606226 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606384 kubelet[1941]: W0711 00:26:55.606244 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606384 kubelet[1941]: E0711 00:26:55.606253 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606454 kubelet[1941]: E0711 00:26:55.606412 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606454 kubelet[1941]: W0711 00:26:55.606420 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606454 kubelet[1941]: E0711 00:26:55.606437 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606581 kubelet[1941]: E0711 00:26:55.606565 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606581 kubelet[1941]: W0711 00:26:55.606575 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606651 kubelet[1941]: E0711 00:26:55.606584 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606725 kubelet[1941]: E0711 00:26:55.606714 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606725 kubelet[1941]: W0711 00:26:55.606724 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606801 kubelet[1941]: E0711 00:26:55.606732 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.606866 kubelet[1941]: E0711 00:26:55.606857 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.606897 kubelet[1941]: W0711 00:26:55.606872 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.606897 kubelet[1941]: E0711 00:26:55.606880 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607046 kubelet[1941]: E0711 00:26:55.607024 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607046 kubelet[1941]: W0711 00:26:55.607035 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.607046 kubelet[1941]: E0711 00:26:55.607045 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607195 kubelet[1941]: E0711 00:26:55.607182 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607195 kubelet[1941]: W0711 00:26:55.607193 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.607281 kubelet[1941]: E0711 00:26:55.607218 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607366 kubelet[1941]: E0711 00:26:55.607355 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607366 kubelet[1941]: W0711 00:26:55.607366 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.607442 kubelet[1941]: E0711 00:26:55.607375 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607525 kubelet[1941]: E0711 00:26:55.607513 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607525 kubelet[1941]: W0711 00:26:55.607523 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.607602 kubelet[1941]: E0711 00:26:55.607531 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607682 kubelet[1941]: E0711 00:26:55.607668 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607682 kubelet[1941]: W0711 00:26:55.607679 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.607751 kubelet[1941]: E0711 00:26:55.607687 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607820 kubelet[1941]: E0711 00:26:55.607808 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607820 kubelet[1941]: W0711 00:26:55.607818 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.607889 kubelet[1941]: E0711 00:26:55.607825 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.607963 kubelet[1941]: E0711 00:26:55.607951 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.607963 kubelet[1941]: W0711 00:26:55.607960 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.608033 kubelet[1941]: E0711 00:26:55.607968 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.608104 kubelet[1941]: E0711 00:26:55.608093 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.608104 kubelet[1941]: W0711 00:26:55.608104 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.608180 kubelet[1941]: E0711 00:26:55.608111 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.608279 kubelet[1941]: E0711 00:26:55.608265 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.608279 kubelet[1941]: W0711 00:26:55.608276 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.608358 kubelet[1941]: E0711 00:26:55.608285 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.608431 kubelet[1941]: E0711 00:26:55.608419 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.608431 kubelet[1941]: W0711 00:26:55.608428 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.608505 kubelet[1941]: E0711 00:26:55.608436 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.608567 kubelet[1941]: E0711 00:26:55.608556 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.608567 kubelet[1941]: W0711 00:26:55.608565 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.608634 kubelet[1941]: E0711 00:26:55.608573 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.608701 kubelet[1941]: E0711 00:26:55.608689 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.608701 kubelet[1941]: W0711 00:26:55.608698 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.608771 kubelet[1941]: E0711 00:26:55.608708 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.618653 env[1213]: time="2025-07-11T00:26:55.618486864Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:26:55.618653 env[1213]: time="2025-07-11T00:26:55.618523026Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:26:55.618653 env[1213]: time="2025-07-11T00:26:55.618533866Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:26:55.619104 env[1213]: time="2025-07-11T00:26:55.618653070Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905 pid=2493 runtime=io.containerd.runc.v2 Jul 11 00:26:55.620541 kubelet[1941]: E0711 00:26:55.620254 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.620541 kubelet[1941]: W0711 00:26:55.620271 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.620541 kubelet[1941]: E0711 00:26:55.620307 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.620541 kubelet[1941]: I0711 00:26:55.620340 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d23addcf-0d96-4e31-8fa7-1460f1e178d3-kubelet-dir\") pod \"csi-node-driver-nlm65\" (UID: \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\") " pod="calico-system/csi-node-driver-nlm65" Jul 11 00:26:55.621223 kubelet[1941]: E0711 00:26:55.621012 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.621223 kubelet[1941]: W0711 00:26:55.621045 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.621223 kubelet[1941]: E0711 00:26:55.621067 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.621223 kubelet[1941]: I0711 00:26:55.621086 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d23addcf-0d96-4e31-8fa7-1460f1e178d3-socket-dir\") pod \"csi-node-driver-nlm65\" (UID: \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\") " pod="calico-system/csi-node-driver-nlm65" Jul 11 00:26:55.621757 kubelet[1941]: E0711 00:26:55.621427 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.621757 kubelet[1941]: W0711 00:26:55.621443 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.621757 kubelet[1941]: E0711 00:26:55.621465 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.621757 kubelet[1941]: I0711 00:26:55.621582 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d23addcf-0d96-4e31-8fa7-1460f1e178d3-registration-dir\") pod \"csi-node-driver-nlm65\" (UID: \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\") " pod="calico-system/csi-node-driver-nlm65" Jul 11 00:26:55.621757 kubelet[1941]: E0711 00:26:55.621652 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.621757 kubelet[1941]: W0711 00:26:55.621661 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.621757 kubelet[1941]: E0711 00:26:55.621673 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.622183 kubelet[1941]: E0711 00:26:55.622042 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.622183 kubelet[1941]: W0711 00:26:55.622056 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.622183 kubelet[1941]: E0711 00:26:55.622068 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.623335 kubelet[1941]: E0711 00:26:55.622521 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.623335 kubelet[1941]: W0711 00:26:55.622537 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.623335 kubelet[1941]: E0711 00:26:55.622550 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.623335 kubelet[1941]: I0711 00:26:55.622570 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gtnq7\" (UniqueName: \"kubernetes.io/projected/d23addcf-0d96-4e31-8fa7-1460f1e178d3-kube-api-access-gtnq7\") pod \"csi-node-driver-nlm65\" (UID: \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\") " pod="calico-system/csi-node-driver-nlm65" Jul 11 00:26:55.623886 kubelet[1941]: E0711 00:26:55.623554 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.623886 kubelet[1941]: W0711 00:26:55.623570 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.623886 kubelet[1941]: E0711 00:26:55.623675 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.623886 kubelet[1941]: I0711 00:26:55.623710 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d23addcf-0d96-4e31-8fa7-1460f1e178d3-varrun\") pod \"csi-node-driver-nlm65\" (UID: \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\") " pod="calico-system/csi-node-driver-nlm65" Jul 11 00:26:55.623886 kubelet[1941]: E0711 00:26:55.623780 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.623886 kubelet[1941]: W0711 00:26:55.623787 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.623886 kubelet[1941]: E0711 00:26:55.623812 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.624296 kubelet[1941]: E0711 00:26:55.624152 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.624296 kubelet[1941]: W0711 00:26:55.624163 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.624296 kubelet[1941]: E0711 00:26:55.624270 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.624574 kubelet[1941]: E0711 00:26:55.624456 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.624574 kubelet[1941]: W0711 00:26:55.624466 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.624574 kubelet[1941]: E0711 00:26:55.624554 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.624823 kubelet[1941]: E0711 00:26:55.624719 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.624823 kubelet[1941]: W0711 00:26:55.624730 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.624823 kubelet[1941]: E0711 00:26:55.624742 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.625120 kubelet[1941]: E0711 00:26:55.624994 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.625120 kubelet[1941]: W0711 00:26:55.625005 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.625120 kubelet[1941]: E0711 00:26:55.625016 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.625428 kubelet[1941]: E0711 00:26:55.625304 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.625428 kubelet[1941]: W0711 00:26:55.625317 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.625428 kubelet[1941]: E0711 00:26:55.625328 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.625729 kubelet[1941]: E0711 00:26:55.625609 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.625729 kubelet[1941]: W0711 00:26:55.625621 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.625729 kubelet[1941]: E0711 00:26:55.625630 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.625955 kubelet[1941]: E0711 00:26:55.625899 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.625955 kubelet[1941]: W0711 00:26:55.625911 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.625955 kubelet[1941]: E0711 00:26:55.625934 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.660522 systemd[1]: Started cri-containerd-1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905.scope. Jul 11 00:26:55.724390 kubelet[1941]: E0711 00:26:55.724338 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.724390 kubelet[1941]: W0711 00:26:55.724362 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.724390 kubelet[1941]: E0711 00:26:55.724382 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.724631 kubelet[1941]: E0711 00:26:55.724606 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.724631 kubelet[1941]: W0711 00:26:55.724621 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.724701 kubelet[1941]: E0711 00:26:55.724635 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.724839 kubelet[1941]: E0711 00:26:55.724825 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.724839 kubelet[1941]: W0711 00:26:55.724838 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.724932 kubelet[1941]: E0711 00:26:55.724848 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.725058 kubelet[1941]: E0711 00:26:55.725028 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.725058 kubelet[1941]: W0711 00:26:55.725046 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.725058 kubelet[1941]: E0711 00:26:55.725056 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.725357 kubelet[1941]: E0711 00:26:55.725340 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.725357 kubelet[1941]: W0711 00:26:55.725355 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.725441 kubelet[1941]: E0711 00:26:55.725364 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.725987 kubelet[1941]: E0711 00:26:55.725973 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.725987 kubelet[1941]: W0711 00:26:55.725985 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.726083 kubelet[1941]: E0711 00:26:55.726056 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.726174 kubelet[1941]: E0711 00:26:55.726163 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.726207 kubelet[1941]: W0711 00:26:55.726174 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.726288 kubelet[1941]: E0711 00:26:55.726267 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.726346 kubelet[1941]: E0711 00:26:55.726336 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.726370 kubelet[1941]: W0711 00:26:55.726346 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.726424 kubelet[1941]: E0711 00:26:55.726412 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.726486 kubelet[1941]: E0711 00:26:55.726475 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.726486 kubelet[1941]: W0711 00:26:55.726485 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.726564 kubelet[1941]: E0711 00:26:55.726552 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.726624 kubelet[1941]: E0711 00:26:55.726614 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.726649 kubelet[1941]: W0711 00:26:55.726624 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.726761 kubelet[1941]: E0711 00:26:55.726688 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.726803 kubelet[1941]: E0711 00:26:55.726775 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.726803 kubelet[1941]: W0711 00:26:55.726781 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.726803 kubelet[1941]: E0711 00:26:55.726790 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.726941 kubelet[1941]: E0711 00:26:55.726927 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.726941 kubelet[1941]: W0711 00:26:55.726937 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.727000 kubelet[1941]: E0711 00:26:55.726946 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.727134 kubelet[1941]: E0711 00:26:55.727123 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.727160 kubelet[1941]: W0711 00:26:55.727133 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.727160 kubelet[1941]: E0711 00:26:55.727142 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.727337 kubelet[1941]: E0711 00:26:55.727325 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.727337 kubelet[1941]: W0711 00:26:55.727336 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.727408 kubelet[1941]: E0711 00:26:55.727345 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.727491 kubelet[1941]: E0711 00:26:55.727479 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.727491 kubelet[1941]: W0711 00:26:55.727489 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.727544 kubelet[1941]: E0711 00:26:55.727497 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.727656 kubelet[1941]: E0711 00:26:55.727639 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.727656 kubelet[1941]: W0711 00:26:55.727652 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.727721 kubelet[1941]: E0711 00:26:55.727711 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.728008 kubelet[1941]: E0711 00:26:55.727974 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.728008 kubelet[1941]: W0711 00:26:55.727990 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.728091 kubelet[1941]: E0711 00:26:55.728074 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.728166 kubelet[1941]: E0711 00:26:55.728153 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.728197 kubelet[1941]: W0711 00:26:55.728166 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.728267 kubelet[1941]: E0711 00:26:55.728252 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.729323 kubelet[1941]: E0711 00:26:55.729294 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.729323 kubelet[1941]: W0711 00:26:55.729316 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.729512 kubelet[1941]: E0711 00:26:55.729411 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.729786 kubelet[1941]: E0711 00:26:55.729761 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.729786 kubelet[1941]: W0711 00:26:55.729778 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.729855 kubelet[1941]: E0711 00:26:55.729826 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.730183 kubelet[1941]: E0711 00:26:55.729970 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.730183 kubelet[1941]: W0711 00:26:55.729984 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.730183 kubelet[1941]: E0711 00:26:55.730033 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.730183 kubelet[1941]: E0711 00:26:55.730178 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.730326 kubelet[1941]: W0711 00:26:55.730189 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.730326 kubelet[1941]: E0711 00:26:55.730247 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.730000 audit: BPF prog-id=129 op=LOAD Jul 11 00:26:55.732508 kubelet[1941]: E0711 00:26:55.730575 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.732508 kubelet[1941]: W0711 00:26:55.730589 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.732508 kubelet[1941]: E0711 00:26:55.730606 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.732508 kubelet[1941]: E0711 00:26:55.730807 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.732508 kubelet[1941]: W0711 00:26:55.730815 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.732508 kubelet[1941]: E0711 00:26:55.730827 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.732508 kubelet[1941]: E0711 00:26:55.731029 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.732508 kubelet[1941]: W0711 00:26:55.731036 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.732508 kubelet[1941]: E0711 00:26:55.731054 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.731000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.731000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2493 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166353737643933353532396237393830653632373934623835313433 Jul 11 00:26:55.731000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.731000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2493 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166353737643933353532396237393830653632373934623835313433 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit: BPF prog-id=130 op=LOAD Jul 11 00:26:55.732000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2493 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166353737643933353532396237393830653632373934623835313433 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.732000 audit: BPF prog-id=131 op=LOAD Jul 11 00:26:55.732000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2493 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166353737643933353532396237393830653632373934623835313433 Jul 11 00:26:55.733000 audit: BPF prog-id=131 op=UNLOAD Jul 11 00:26:55.733000 audit: BPF prog-id=130 op=UNLOAD Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:55.733000 audit: BPF prog-id=132 op=LOAD Jul 11 00:26:55.733000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2493 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:55.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166353737643933353532396237393830653632373934623835313433 Jul 11 00:26:55.740586 kubelet[1941]: E0711 00:26:55.740550 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:26:55.740586 kubelet[1941]: W0711 00:26:55.740567 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:26:55.740586 kubelet[1941]: E0711 00:26:55.740588 1941 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:26:55.746830 env[1213]: time="2025-07-11T00:26:55.746787133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wd24c,Uid:00c04cf7-3bde-4e22-b527-8ad3625b49f5,Namespace:calico-system,Attempt:0,} returns sandbox id \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\"" Jul 11 00:26:56.047000 audit[2569]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2569 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:56.047000 audit[2569]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffaddf960 a2=0 a3=1 items=0 ppid=2050 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:56.047000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:56.065000 audit[2569]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2569 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:26:56.065000 audit[2569]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffaddf960 a2=0 a3=1 items=0 ppid=2050 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:56.065000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:26:56.224936 systemd[1]: run-containerd-runc-k8s.io-69437664529fcc2e6c007b2e79e61592527ea43916dd053f79766b2f10fde648-runc.qqml9k.mount: Deactivated successfully. Jul 11 00:26:56.254917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3948760605.mount: Deactivated successfully. Jul 11 00:26:57.714631 kubelet[1941]: E0711 00:26:57.714582 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:26:57.717109 env[1213]: time="2025-07-11T00:26:57.717059590Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:57.718705 env[1213]: time="2025-07-11T00:26:57.718652802Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:57.720121 env[1213]: time="2025-07-11T00:26:57.720082008Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:57.721630 env[1213]: time="2025-07-11T00:26:57.721595817Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:57.722169 env[1213]: time="2025-07-11T00:26:57.722133915Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 11 00:26:57.729305 env[1213]: time="2025-07-11T00:26:57.729257266Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 11 00:26:57.744015 env[1213]: time="2025-07-11T00:26:57.743810019Z" level=info msg="CreateContainer within sandbox \"69437664529fcc2e6c007b2e79e61592527ea43916dd053f79766b2f10fde648\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 11 00:26:57.757280 env[1213]: time="2025-07-11T00:26:57.757223176Z" level=info msg="CreateContainer within sandbox \"69437664529fcc2e6c007b2e79e61592527ea43916dd053f79766b2f10fde648\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"2267d5f99cab985c546b07a3c0cfb644c272f544795a231ae07a0b18240770b0\"" Jul 11 00:26:57.758130 env[1213]: time="2025-07-11T00:26:57.758103724Z" level=info msg="StartContainer for \"2267d5f99cab985c546b07a3c0cfb644c272f544795a231ae07a0b18240770b0\"" Jul 11 00:26:57.776659 systemd[1]: Started cri-containerd-2267d5f99cab985c546b07a3c0cfb644c272f544795a231ae07a0b18240770b0.scope. Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.852180 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 11 00:26:57.852319 kernel: audit: type=1400 audit(1752193617.848:999): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.852356 kernel: audit: type=1400 audit(1752193617.848:1000): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.856015 kernel: audit: type=1400 audit(1752193617.848:1001): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.856076 kernel: audit: type=1400 audit(1752193617.848:1002): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.858000 kernel: audit: type=1400 audit(1752193617.848:1003): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.860004 kernel: audit: type=1400 audit(1752193617.848:1004): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.864013 kernel: audit: type=1400 audit(1752193617.848:1005): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.864081 kernel: audit: type=1400 audit(1752193617.848:1006): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.866431 kernel: audit: type=1400 audit(1752193617.848:1007): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.870761 kernel: audit: type=1400 audit(1752193617.848:1008): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.848000 audit: BPF prog-id=133 op=LOAD Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2427 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:57.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232363764356639396361623938356335343662303761336330636662 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2427 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:57.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232363764356639396361623938356335343662303761336330636662 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.851000 audit: BPF prog-id=134 op=LOAD Jul 11 00:26:57.851000 audit[2581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2427 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:57.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232363764356639396361623938356335343662303761336330636662 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.853000 audit: BPF prog-id=135 op=LOAD Jul 11 00:26:57.853000 audit[2581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2427 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:57.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232363764356639396361623938356335343662303761336330636662 Jul 11 00:26:57.855000 audit: BPF prog-id=135 op=UNLOAD Jul 11 00:26:57.855000 audit: BPF prog-id=134 op=UNLOAD Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:57.855000 audit: BPF prog-id=136 op=LOAD Jul 11 00:26:57.855000 audit[2581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2427 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:57.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232363764356639396361623938356335343662303761336330636662 Jul 11 00:26:57.893227 env[1213]: time="2025-07-11T00:26:57.889979971Z" level=info msg="StartContainer for \"2267d5f99cab985c546b07a3c0cfb644c272f544795a231ae07a0b18240770b0\" returns successfully" Jul 11 00:26:58.612489 env[1213]: time="2025-07-11T00:26:58.612439714Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:58.614683 env[1213]: time="2025-07-11T00:26:58.614643662Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:58.616285 env[1213]: time="2025-07-11T00:26:58.616233912Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:58.619141 env[1213]: time="2025-07-11T00:26:58.619091840Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:26:58.619566 env[1213]: time="2025-07-11T00:26:58.619524614Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 11 00:26:58.623742 env[1213]: time="2025-07-11T00:26:58.623688503Z" level=info msg="CreateContainer within sandbox \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 11 00:26:58.639797 env[1213]: time="2025-07-11T00:26:58.639744281Z" level=info msg="CreateContainer within sandbox \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6\"" Jul 11 00:26:58.640523 env[1213]: time="2025-07-11T00:26:58.640481224Z" level=info msg="StartContainer for \"4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6\"" Jul 11 00:26:58.656469 systemd[1]: Started cri-containerd-4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6.scope. Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2493 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:58.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393364383965656432333466616534343131313635396437633934 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.686000 audit: BPF prog-id=137 op=LOAD Jul 11 00:26:58.686000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2493 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:58.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393364383965656432333466616534343131313635396437633934 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.687000 audit: BPF prog-id=138 op=LOAD Jul 11 00:26:58.687000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2493 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:58.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393364383965656432333466616534343131313635396437633934 Jul 11 00:26:58.688000 audit: BPF prog-id=138 op=UNLOAD Jul 11 00:26:58.688000 audit: BPF prog-id=137 op=UNLOAD Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:26:58.688000 audit: BPF prog-id=139 op=LOAD Jul 11 00:26:58.688000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2493 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:26:58.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393364383965656432333466616534343131313635396437633934 Jul 11 00:26:58.708119 env[1213]: time="2025-07-11T00:26:58.708058401Z" level=info msg="StartContainer for \"4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6\" returns successfully" Jul 11 00:26:58.737327 systemd[1]: cri-containerd-4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6.scope: Deactivated successfully. Jul 11 00:26:58.740000 audit: BPF prog-id=139 op=UNLOAD Jul 11 00:26:58.757952 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6-rootfs.mount: Deactivated successfully. Jul 11 00:26:58.765921 kubelet[1941]: E0711 00:26:58.765818 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:58.769080 env[1213]: time="2025-07-11T00:26:58.769019093Z" level=info msg="shim disconnected" id=4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6 Jul 11 00:26:58.769080 env[1213]: time="2025-07-11T00:26:58.769064654Z" level=warning msg="cleaning up after shim disconnected" id=4993d89eed234fae44111659d7c94703e9ce76138069013410be5abe8c1e9ec6 namespace=k8s.io Jul 11 00:26:58.769080 env[1213]: time="2025-07-11T00:26:58.769075934Z" level=info msg="cleaning up dead shim" Jul 11 00:26:58.782879 env[1213]: time="2025-07-11T00:26:58.782829881Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:26:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2662 runtime=io.containerd.runc.v2\n" Jul 11 00:26:58.788360 kubelet[1941]: I0711 00:26:58.788248 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7f9d4fcbdc-4whrj" podStartSLOduration=1.515206202 podStartE2EDuration="3.788198728s" podCreationTimestamp="2025-07-11 00:26:55 +0000 UTC" firstStartedPulling="2025-07-11 00:26:55.455557677 +0000 UTC m=+18.839950404" lastFinishedPulling="2025-07-11 00:26:57.728550203 +0000 UTC m=+21.112942930" observedRunningTime="2025-07-11 00:26:58.788161327 +0000 UTC m=+22.172554054" watchObservedRunningTime="2025-07-11 00:26:58.788198728 +0000 UTC m=+22.172591455" Jul 11 00:26:59.711689 kubelet[1941]: E0711 00:26:59.711631 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:26:59.772686 kubelet[1941]: I0711 00:26:59.772655 1941 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:26:59.773395 kubelet[1941]: E0711 00:26:59.773373 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:26:59.774075 env[1213]: time="2025-07-11T00:26:59.774036008Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 11 00:27:01.711493 kubelet[1941]: E0711 00:27:01.711432 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:27:02.963579 env[1213]: time="2025-07-11T00:27:02.963522421Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:02.971309 env[1213]: time="2025-07-11T00:27:02.971268742Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:02.972970 env[1213]: time="2025-07-11T00:27:02.972939066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:02.974581 env[1213]: time="2025-07-11T00:27:02.974547547Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:02.975153 env[1213]: time="2025-07-11T00:27:02.975126963Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 11 00:27:02.979321 env[1213]: time="2025-07-11T00:27:02.979287391Z" level=info msg="CreateContainer within sandbox \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 11 00:27:02.995253 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2415309384.mount: Deactivated successfully. Jul 11 00:27:02.999374 env[1213]: time="2025-07-11T00:27:02.999313951Z" level=info msg="CreateContainer within sandbox \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830\"" Jul 11 00:27:02.999834 env[1213]: time="2025-07-11T00:27:02.999813804Z" level=info msg="StartContainer for \"71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830\"" Jul 11 00:27:03.021119 systemd[1]: run-containerd-runc-k8s.io-71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830-runc.uYDMPg.mount: Deactivated successfully. Jul 11 00:27:03.022618 systemd[1]: Started cri-containerd-71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830.scope. Jul 11 00:27:03.062000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066770 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 11 00:27:03.066842 kernel: audit: type=1400 audit(1752193623.062:1024): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066869 kernel: audit: type=1300 audit(1752193623.062:1024): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2493 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:03.062000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2493 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:03.069492 kernel: audit: type=1327 audit(1752193623.062:1024): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373138626265316366323231633239393337336562656538653938 Jul 11 00:27:03.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373138626265316366323231633239393337336562656538653938 Jul 11 00:27:03.072237 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.076173 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.076282 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.080029 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.080114 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.081873 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.083914 kernel: audit: type=1400 audit(1752193623.063:1025): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit: BPF prog-id=140 op=LOAD Jul 11 00:27:03.063000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2493 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:03.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373138626265316366323231633239393337336562656538653938 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.063000 audit: BPF prog-id=141 op=LOAD Jul 11 00:27:03.063000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2493 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:03.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373138626265316366323231633239393337336562656538653938 Jul 11 00:27:03.065000 audit: BPF prog-id=141 op=UNLOAD Jul 11 00:27:03.065000 audit: BPF prog-id=140 op=UNLOAD Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:03.066000 audit: BPF prog-id=142 op=LOAD Jul 11 00:27:03.066000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2493 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:03.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373138626265316366323231633239393337336562656538653938 Jul 11 00:27:03.141284 env[1213]: time="2025-07-11T00:27:03.141229809Z" level=info msg="StartContainer for \"71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830\" returns successfully" Jul 11 00:27:03.711518 kubelet[1941]: E0711 00:27:03.711448 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:27:03.736171 env[1213]: time="2025-07-11T00:27:03.736116830Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:27:03.738448 systemd[1]: cri-containerd-71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830.scope: Deactivated successfully. Jul 11 00:27:03.744000 audit: BPF prog-id=142 op=UNLOAD Jul 11 00:27:03.759197 env[1213]: time="2025-07-11T00:27:03.759136444Z" level=info msg="shim disconnected" id=71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830 Jul 11 00:27:03.759538 env[1213]: time="2025-07-11T00:27:03.759518774Z" level=warning msg="cleaning up after shim disconnected" id=71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830 namespace=k8s.io Jul 11 00:27:03.759610 env[1213]: time="2025-07-11T00:27:03.759594975Z" level=info msg="cleaning up dead shim" Jul 11 00:27:03.766912 env[1213]: time="2025-07-11T00:27:03.766873917Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:27:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2731 runtime=io.containerd.runc.v2\n" Jul 11 00:27:03.769482 kubelet[1941]: I0711 00:27:03.769434 1941 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 11 00:27:03.783463 env[1213]: time="2025-07-11T00:27:03.783418249Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 11 00:27:03.810533 systemd[1]: Created slice kubepods-besteffort-poda2f06025_1162_4925_a86c_399f3bdfe4ae.slice. Jul 11 00:27:03.816755 systemd[1]: Created slice kubepods-burstable-pod5512b9d3_1bf0_4c89_a3a3_33f79b0f73ad.slice. Jul 11 00:27:03.821786 systemd[1]: Created slice kubepods-besteffort-pod311c407f_000e_45a9_abaa_20e369f1001f.slice. Jul 11 00:27:03.828479 systemd[1]: Created slice kubepods-besteffort-pod22590bf7_c35e_4aef_831c_d97c50f394c2.slice. Jul 11 00:27:03.836720 systemd[1]: Created slice kubepods-burstable-podd13d205f_ef30_472a_ac7f_86f872056c53.slice. Jul 11 00:27:03.842955 systemd[1]: Created slice kubepods-besteffort-podd3884153_78af_4ad3_ae84_e50c525a8fa2.slice. Jul 11 00:27:03.849476 systemd[1]: Created slice kubepods-besteffort-pod8dd2b46e_3124_43b5_a369_e2370d59a903.slice. Jul 11 00:27:03.885462 kubelet[1941]: I0711 00:27:03.885415 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-ca-bundle\") pod \"whisker-5c6d9bfb76-b6tn2\" (UID: \"d3884153-78af-4ad3-ae84-e50c525a8fa2\") " pod="calico-system/whisker-5c6d9bfb76-b6tn2" Jul 11 00:27:03.885462 kubelet[1941]: I0711 00:27:03.885468 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sj96b\" (UniqueName: \"kubernetes.io/projected/d3884153-78af-4ad3-ae84-e50c525a8fa2-kube-api-access-sj96b\") pod \"whisker-5c6d9bfb76-b6tn2\" (UID: \"d3884153-78af-4ad3-ae84-e50c525a8fa2\") " pod="calico-system/whisker-5c6d9bfb76-b6tn2" Jul 11 00:27:03.885661 kubelet[1941]: I0711 00:27:03.885487 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad-config-volume\") pod \"coredns-668d6bf9bc-xzph5\" (UID: \"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad\") " pod="kube-system/coredns-668d6bf9bc-xzph5" Jul 11 00:27:03.885661 kubelet[1941]: I0711 00:27:03.885506 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8dd2b46e-3124-43b5-a369-e2370d59a903-tigera-ca-bundle\") pod \"calico-kube-controllers-7cbb9bcc9f-ff556\" (UID: \"8dd2b46e-3124-43b5-a369-e2370d59a903\") " pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" Jul 11 00:27:03.885661 kubelet[1941]: I0711 00:27:03.885525 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cbshx\" (UniqueName: \"kubernetes.io/projected/5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad-kube-api-access-cbshx\") pod \"coredns-668d6bf9bc-xzph5\" (UID: \"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad\") " pod="kube-system/coredns-668d6bf9bc-xzph5" Jul 11 00:27:03.885661 kubelet[1941]: I0711 00:27:03.885541 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a2f06025-1162-4925-a86c-399f3bdfe4ae-calico-apiserver-certs\") pod \"calico-apiserver-7cb6fc77df-5xrz7\" (UID: \"a2f06025-1162-4925-a86c-399f3bdfe4ae\") " pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" Jul 11 00:27:03.885661 kubelet[1941]: I0711 00:27:03.885558 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/22590bf7-c35e-4aef-831c-d97c50f394c2-config\") pod \"goldmane-768f4c5c69-lbsrl\" (UID: \"22590bf7-c35e-4aef-831c-d97c50f394c2\") " pod="calico-system/goldmane-768f4c5c69-lbsrl" Jul 11 00:27:03.885981 kubelet[1941]: I0711 00:27:03.885953 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-njpks\" (UniqueName: \"kubernetes.io/projected/22590bf7-c35e-4aef-831c-d97c50f394c2-kube-api-access-njpks\") pod \"goldmane-768f4c5c69-lbsrl\" (UID: \"22590bf7-c35e-4aef-831c-d97c50f394c2\") " pod="calico-system/goldmane-768f4c5c69-lbsrl" Jul 11 00:27:03.886729 kubelet[1941]: I0711 00:27:03.886011 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/d13d205f-ef30-472a-ac7f-86f872056c53-config-volume\") pod \"coredns-668d6bf9bc-m97fq\" (UID: \"d13d205f-ef30-472a-ac7f-86f872056c53\") " pod="kube-system/coredns-668d6bf9bc-m97fq" Jul 11 00:27:03.886729 kubelet[1941]: I0711 00:27:03.886029 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4tk9d\" (UniqueName: \"kubernetes.io/projected/d13d205f-ef30-472a-ac7f-86f872056c53-kube-api-access-4tk9d\") pod \"coredns-668d6bf9bc-m97fq\" (UID: \"d13d205f-ef30-472a-ac7f-86f872056c53\") " pod="kube-system/coredns-668d6bf9bc-m97fq" Jul 11 00:27:03.886729 kubelet[1941]: I0711 00:27:03.886074 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/22590bf7-c35e-4aef-831c-d97c50f394c2-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-lbsrl\" (UID: \"22590bf7-c35e-4aef-831c-d97c50f394c2\") " pod="calico-system/goldmane-768f4c5c69-lbsrl" Jul 11 00:27:03.886729 kubelet[1941]: I0711 00:27:03.886109 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/311c407f-000e-45a9-abaa-20e369f1001f-calico-apiserver-certs\") pod \"calico-apiserver-7cb6fc77df-ts4sp\" (UID: \"311c407f-000e-45a9-abaa-20e369f1001f\") " pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" Jul 11 00:27:03.886729 kubelet[1941]: I0711 00:27:03.886155 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-backend-key-pair\") pod \"whisker-5c6d9bfb76-b6tn2\" (UID: \"d3884153-78af-4ad3-ae84-e50c525a8fa2\") " pod="calico-system/whisker-5c6d9bfb76-b6tn2" Jul 11 00:27:03.886899 kubelet[1941]: I0711 00:27:03.886175 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cz8mv\" (UniqueName: \"kubernetes.io/projected/a2f06025-1162-4925-a86c-399f3bdfe4ae-kube-api-access-cz8mv\") pod \"calico-apiserver-7cb6fc77df-5xrz7\" (UID: \"a2f06025-1162-4925-a86c-399f3bdfe4ae\") " pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" Jul 11 00:27:03.886899 kubelet[1941]: I0711 00:27:03.886249 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lc2np\" (UniqueName: \"kubernetes.io/projected/311c407f-000e-45a9-abaa-20e369f1001f-kube-api-access-lc2np\") pod \"calico-apiserver-7cb6fc77df-ts4sp\" (UID: \"311c407f-000e-45a9-abaa-20e369f1001f\") " pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" Jul 11 00:27:03.886899 kubelet[1941]: I0711 00:27:03.886268 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/22590bf7-c35e-4aef-831c-d97c50f394c2-goldmane-key-pair\") pod \"goldmane-768f4c5c69-lbsrl\" (UID: \"22590bf7-c35e-4aef-831c-d97c50f394c2\") " pod="calico-system/goldmane-768f4c5c69-lbsrl" Jul 11 00:27:03.886899 kubelet[1941]: I0711 00:27:03.886283 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q7hbv\" (UniqueName: \"kubernetes.io/projected/8dd2b46e-3124-43b5-a369-e2370d59a903-kube-api-access-q7hbv\") pod \"calico-kube-controllers-7cbb9bcc9f-ff556\" (UID: \"8dd2b46e-3124-43b5-a369-e2370d59a903\") " pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" Jul 11 00:27:03.998498 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-71718bbe1cf221c299373ebee8e98123d166323611b438148b1317dc00813830-rootfs.mount: Deactivated successfully. Jul 11 00:27:04.113783 env[1213]: time="2025-07-11T00:27:04.113735005Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-5xrz7,Uid:a2f06025-1162-4925-a86c-399f3bdfe4ae,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:27:04.120558 kubelet[1941]: E0711 00:27:04.120524 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:04.121339 env[1213]: time="2025-07-11T00:27:04.120962618Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xzph5,Uid:5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad,Namespace:kube-system,Attempt:0,}" Jul 11 00:27:04.130855 env[1213]: time="2025-07-11T00:27:04.130813373Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-ts4sp,Uid:311c407f-000e-45a9-abaa-20e369f1001f,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:27:04.135839 env[1213]: time="2025-07-11T00:27:04.135805413Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-lbsrl,Uid:22590bf7-c35e-4aef-831c-d97c50f394c2,Namespace:calico-system,Attempt:0,}" Jul 11 00:27:04.140330 kubelet[1941]: E0711 00:27:04.140290 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:04.140714 env[1213]: time="2025-07-11T00:27:04.140675609Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-m97fq,Uid:d13d205f-ef30-472a-ac7f-86f872056c53,Namespace:kube-system,Attempt:0,}" Jul 11 00:27:04.152148 env[1213]: time="2025-07-11T00:27:04.152078642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c6d9bfb76-b6tn2,Uid:d3884153-78af-4ad3-ae84-e50c525a8fa2,Namespace:calico-system,Attempt:0,}" Jul 11 00:27:04.152860 env[1213]: time="2025-07-11T00:27:04.152823620Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7cbb9bcc9f-ff556,Uid:8dd2b46e-3124-43b5-a369-e2370d59a903,Namespace:calico-system,Attempt:0,}" Jul 11 00:27:04.404892 env[1213]: time="2025-07-11T00:27:04.404747283Z" level=error msg="Failed to destroy network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.405787 env[1213]: time="2025-07-11T00:27:04.405743827Z" level=error msg="encountered an error cleaning up failed sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.406022 env[1213]: time="2025-07-11T00:27:04.405991273Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-lbsrl,Uid:22590bf7-c35e-4aef-831c-d97c50f394c2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.407056 kubelet[1941]: E0711 00:27:04.406918 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.407566 kubelet[1941]: E0711 00:27:04.407521 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-lbsrl" Jul 11 00:27:04.407566 kubelet[1941]: E0711 00:27:04.407563 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-lbsrl" Jul 11 00:27:04.407656 kubelet[1941]: E0711 00:27:04.407616 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-lbsrl_calico-system(22590bf7-c35e-4aef-831c-d97c50f394c2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-lbsrl_calico-system(22590bf7-c35e-4aef-831c-d97c50f394c2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-lbsrl" podUID="22590bf7-c35e-4aef-831c-d97c50f394c2" Jul 11 00:27:04.417368 env[1213]: time="2025-07-11T00:27:04.417309984Z" level=error msg="Failed to destroy network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.417701 env[1213]: time="2025-07-11T00:27:04.417666472Z" level=error msg="encountered an error cleaning up failed sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.417753 env[1213]: time="2025-07-11T00:27:04.417729074Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c6d9bfb76-b6tn2,Uid:d3884153-78af-4ad3-ae84-e50c525a8fa2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.417959 kubelet[1941]: E0711 00:27:04.417918 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.418023 kubelet[1941]: E0711 00:27:04.417979 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5c6d9bfb76-b6tn2" Jul 11 00:27:04.418023 kubelet[1941]: E0711 00:27:04.417999 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5c6d9bfb76-b6tn2" Jul 11 00:27:04.418085 kubelet[1941]: E0711 00:27:04.418033 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5c6d9bfb76-b6tn2_calico-system(d3884153-78af-4ad3-ae84-e50c525a8fa2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5c6d9bfb76-b6tn2_calico-system(d3884153-78af-4ad3-ae84-e50c525a8fa2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5c6d9bfb76-b6tn2" podUID="d3884153-78af-4ad3-ae84-e50c525a8fa2" Jul 11 00:27:04.422836 env[1213]: time="2025-07-11T00:27:04.422784435Z" level=error msg="Failed to destroy network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.423298 env[1213]: time="2025-07-11T00:27:04.423194444Z" level=error msg="encountered an error cleaning up failed sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.423371 env[1213]: time="2025-07-11T00:27:04.423264366Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-5xrz7,Uid:a2f06025-1162-4925-a86c-399f3bdfe4ae,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.423556 kubelet[1941]: E0711 00:27:04.423519 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.423621 kubelet[1941]: E0711 00:27:04.423576 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" Jul 11 00:27:04.423621 kubelet[1941]: E0711 00:27:04.423595 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" Jul 11 00:27:04.423681 kubelet[1941]: E0711 00:27:04.423629 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7cb6fc77df-5xrz7_calico-apiserver(a2f06025-1162-4925-a86c-399f3bdfe4ae)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7cb6fc77df-5xrz7_calico-apiserver(a2f06025-1162-4925-a86c-399f3bdfe4ae)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" podUID="a2f06025-1162-4925-a86c-399f3bdfe4ae" Jul 11 00:27:04.425154 env[1213]: time="2025-07-11T00:27:04.425111530Z" level=error msg="Failed to destroy network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.426496 env[1213]: time="2025-07-11T00:27:04.426460163Z" level=error msg="encountered an error cleaning up failed sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.427566 env[1213]: time="2025-07-11T00:27:04.427512788Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xzph5,Uid:5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.427831 kubelet[1941]: E0711 00:27:04.427795 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.427909 kubelet[1941]: E0711 00:27:04.427846 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-xzph5" Jul 11 00:27:04.427909 kubelet[1941]: E0711 00:27:04.427863 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-xzph5" Jul 11 00:27:04.427960 kubelet[1941]: E0711 00:27:04.427903 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-xzph5_kube-system(5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-xzph5_kube-system(5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-xzph5" podUID="5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad" Jul 11 00:27:04.432381 env[1213]: time="2025-07-11T00:27:04.432327863Z" level=error msg="Failed to destroy network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.432741 env[1213]: time="2025-07-11T00:27:04.432705872Z" level=error msg="Failed to destroy network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.433306 env[1213]: time="2025-07-11T00:27:04.433233284Z" level=error msg="encountered an error cleaning up failed sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.433447 env[1213]: time="2025-07-11T00:27:04.433416849Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-ts4sp,Uid:311c407f-000e-45a9-abaa-20e369f1001f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.433608 env[1213]: time="2025-07-11T00:27:04.433429169Z" level=error msg="encountered an error cleaning up failed sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.433759 kubelet[1941]: E0711 00:27:04.433723 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.433847 kubelet[1941]: E0711 00:27:04.433770 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" Jul 11 00:27:04.433847 kubelet[1941]: E0711 00:27:04.433793 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" Jul 11 00:27:04.433847 kubelet[1941]: E0711 00:27:04.433824 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7cb6fc77df-ts4sp_calico-apiserver(311c407f-000e-45a9-abaa-20e369f1001f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7cb6fc77df-ts4sp_calico-apiserver(311c407f-000e-45a9-abaa-20e369f1001f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" podUID="311c407f-000e-45a9-abaa-20e369f1001f" Jul 11 00:27:04.435573 env[1213]: time="2025-07-11T00:27:04.435530299Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-m97fq,Uid:d13d205f-ef30-472a-ac7f-86f872056c53,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.435846 kubelet[1941]: E0711 00:27:04.435817 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.435919 kubelet[1941]: E0711 00:27:04.435857 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-m97fq" Jul 11 00:27:04.435919 kubelet[1941]: E0711 00:27:04.435874 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-m97fq" Jul 11 00:27:04.435919 kubelet[1941]: E0711 00:27:04.435902 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-m97fq_kube-system(d13d205f-ef30-472a-ac7f-86f872056c53)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-m97fq_kube-system(d13d205f-ef30-472a-ac7f-86f872056c53)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-m97fq" podUID="d13d205f-ef30-472a-ac7f-86f872056c53" Jul 11 00:27:04.440802 env[1213]: time="2025-07-11T00:27:04.440756504Z" level=error msg="Failed to destroy network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.441218 env[1213]: time="2025-07-11T00:27:04.441172554Z" level=error msg="encountered an error cleaning up failed sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.441354 env[1213]: time="2025-07-11T00:27:04.441324078Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7cbb9bcc9f-ff556,Uid:8dd2b46e-3124-43b5-a369-e2370d59a903,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.441598 kubelet[1941]: E0711 00:27:04.441572 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.441658 kubelet[1941]: E0711 00:27:04.441618 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" Jul 11 00:27:04.441658 kubelet[1941]: E0711 00:27:04.441633 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" Jul 11 00:27:04.441718 kubelet[1941]: E0711 00:27:04.441659 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7cbb9bcc9f-ff556_calico-system(8dd2b46e-3124-43b5-a369-e2370d59a903)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7cbb9bcc9f-ff556_calico-system(8dd2b46e-3124-43b5-a369-e2370d59a903)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" podUID="8dd2b46e-3124-43b5-a369-e2370d59a903" Jul 11 00:27:04.785244 kubelet[1941]: I0711 00:27:04.785165 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:04.786718 env[1213]: time="2025-07-11T00:27:04.786589334Z" level=info msg="StopPodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\"" Jul 11 00:27:04.787440 kubelet[1941]: I0711 00:27:04.786947 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:04.792823 env[1213]: time="2025-07-11T00:27:04.789328959Z" level=info msg="StopPodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\"" Jul 11 00:27:04.792823 env[1213]: time="2025-07-11T00:27:04.791952142Z" level=info msg="StopPodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\"" Jul 11 00:27:04.792948 kubelet[1941]: I0711 00:27:04.790178 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:04.801260 kubelet[1941]: I0711 00:27:04.801232 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:04.803292 env[1213]: time="2025-07-11T00:27:04.803254772Z" level=info msg="StopPodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\"" Jul 11 00:27:04.811008 kubelet[1941]: I0711 00:27:04.810975 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:04.812312 env[1213]: time="2025-07-11T00:27:04.812272388Z" level=info msg="StopPodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\"" Jul 11 00:27:04.825725 env[1213]: time="2025-07-11T00:27:04.825679748Z" level=error msg="StopPodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" failed" error="failed to destroy network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.825896 kubelet[1941]: I0711 00:27:04.825809 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:04.826453 kubelet[1941]: E0711 00:27:04.826381 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:04.827268 kubelet[1941]: E0711 00:27:04.827188 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b"} Jul 11 00:27:04.827321 kubelet[1941]: E0711 00:27:04.827285 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.827388 kubelet[1941]: E0711 00:27:04.827326 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-xzph5" podUID="5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad" Jul 11 00:27:04.827877 env[1213]: time="2025-07-11T00:27:04.827842800Z" level=info msg="StopPodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\"" Jul 11 00:27:04.830341 kubelet[1941]: I0711 00:27:04.830310 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:04.833480 env[1213]: time="2025-07-11T00:27:04.833428814Z" level=info msg="StopPodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\"" Jul 11 00:27:04.855817 env[1213]: time="2025-07-11T00:27:04.855747627Z" level=error msg="StopPodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" failed" error="failed to destroy network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.856111 env[1213]: time="2025-07-11T00:27:04.856057275Z" level=error msg="StopPodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" failed" error="failed to destroy network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.856178 kubelet[1941]: E0711 00:27:04.856092 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:04.856178 kubelet[1941]: E0711 00:27:04.856155 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2"} Jul 11 00:27:04.856259 kubelet[1941]: E0711 00:27:04.856190 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d3884153-78af-4ad3-ae84-e50c525a8fa2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.856259 kubelet[1941]: E0711 00:27:04.856221 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d3884153-78af-4ad3-ae84-e50c525a8fa2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5c6d9bfb76-b6tn2" podUID="d3884153-78af-4ad3-ae84-e50c525a8fa2" Jul 11 00:27:04.856457 kubelet[1941]: E0711 00:27:04.856425 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:04.856457 kubelet[1941]: E0711 00:27:04.856454 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2"} Jul 11 00:27:04.856534 kubelet[1941]: E0711 00:27:04.856474 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d13d205f-ef30-472a-ac7f-86f872056c53\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.856534 kubelet[1941]: E0711 00:27:04.856490 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d13d205f-ef30-472a-ac7f-86f872056c53\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-m97fq" podUID="d13d205f-ef30-472a-ac7f-86f872056c53" Jul 11 00:27:04.865218 env[1213]: time="2025-07-11T00:27:04.865155932Z" level=error msg="StopPodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" failed" error="failed to destroy network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.865596 kubelet[1941]: E0711 00:27:04.865454 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:04.865596 kubelet[1941]: E0711 00:27:04.865516 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34"} Jul 11 00:27:04.865596 kubelet[1941]: E0711 00:27:04.865547 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8dd2b46e-3124-43b5-a369-e2370d59a903\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.865596 kubelet[1941]: E0711 00:27:04.865567 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8dd2b46e-3124-43b5-a369-e2370d59a903\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" podUID="8dd2b46e-3124-43b5-a369-e2370d59a903" Jul 11 00:27:04.881398 env[1213]: time="2025-07-11T00:27:04.881340399Z" level=error msg="StopPodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" failed" error="failed to destroy network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.881726 kubelet[1941]: E0711 00:27:04.881675 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:04.881791 kubelet[1941]: E0711 00:27:04.881733 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751"} Jul 11 00:27:04.881791 kubelet[1941]: E0711 00:27:04.881774 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"311c407f-000e-45a9-abaa-20e369f1001f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.881864 kubelet[1941]: E0711 00:27:04.881796 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"311c407f-000e-45a9-abaa-20e369f1001f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" podUID="311c407f-000e-45a9-abaa-20e369f1001f" Jul 11 00:27:04.897063 env[1213]: time="2025-07-11T00:27:04.897005374Z" level=error msg="StopPodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" failed" error="failed to destroy network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.897386 kubelet[1941]: E0711 00:27:04.897344 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:04.897454 kubelet[1941]: E0711 00:27:04.897401 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7"} Jul 11 00:27:04.897454 kubelet[1941]: E0711 00:27:04.897447 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"22590bf7-c35e-4aef-831c-d97c50f394c2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.897535 kubelet[1941]: E0711 00:27:04.897468 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"22590bf7-c35e-4aef-831c-d97c50f394c2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-lbsrl" podUID="22590bf7-c35e-4aef-831c-d97c50f394c2" Jul 11 00:27:04.902166 env[1213]: time="2025-07-11T00:27:04.900330533Z" level=error msg="StopPodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" failed" error="failed to destroy network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:04.902277 kubelet[1941]: E0711 00:27:04.900498 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:04.902277 kubelet[1941]: E0711 00:27:04.900527 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2"} Jul 11 00:27:04.902277 kubelet[1941]: E0711 00:27:04.900548 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a2f06025-1162-4925-a86c-399f3bdfe4ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:04.902277 kubelet[1941]: E0711 00:27:04.900565 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a2f06025-1162-4925-a86c-399f3bdfe4ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" podUID="a2f06025-1162-4925-a86c-399f3bdfe4ae" Jul 11 00:27:05.716429 systemd[1]: Created slice kubepods-besteffort-podd23addcf_0d96_4e31_8fa7_1460f1e178d3.slice. Jul 11 00:27:05.719145 env[1213]: time="2025-07-11T00:27:05.719099435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nlm65,Uid:d23addcf-0d96-4e31-8fa7-1460f1e178d3,Namespace:calico-system,Attempt:0,}" Jul 11 00:27:05.780547 env[1213]: time="2025-07-11T00:27:05.780463804Z" level=error msg="Failed to destroy network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:05.780913 env[1213]: time="2025-07-11T00:27:05.780871374Z" level=error msg="encountered an error cleaning up failed sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:05.780967 env[1213]: time="2025-07-11T00:27:05.780940975Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nlm65,Uid:d23addcf-0d96-4e31-8fa7-1460f1e178d3,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:05.781560 kubelet[1941]: E0711 00:27:05.781181 1941 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:05.781560 kubelet[1941]: E0711 00:27:05.781251 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-nlm65" Jul 11 00:27:05.781560 kubelet[1941]: E0711 00:27:05.781271 1941 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-nlm65" Jul 11 00:27:05.781695 kubelet[1941]: E0711 00:27:05.781307 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-nlm65_calico-system(d23addcf-0d96-4e31-8fa7-1460f1e178d3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-nlm65_calico-system(d23addcf-0d96-4e31-8fa7-1460f1e178d3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:27:05.782602 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8-shm.mount: Deactivated successfully. Jul 11 00:27:05.832893 kubelet[1941]: I0711 00:27:05.832754 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:05.833958 env[1213]: time="2025-07-11T00:27:05.833892312Z" level=info msg="StopPodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\"" Jul 11 00:27:05.860531 env[1213]: time="2025-07-11T00:27:05.860451722Z" level=error msg="StopPodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" failed" error="failed to destroy network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:27:05.860935 kubelet[1941]: E0711 00:27:05.860787 1941 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:05.860935 kubelet[1941]: E0711 00:27:05.860841 1941 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8"} Jul 11 00:27:05.860935 kubelet[1941]: E0711 00:27:05.860877 1941 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:27:05.860935 kubelet[1941]: E0711 00:27:05.860897 1941 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d23addcf-0d96-4e31-8fa7-1460f1e178d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-nlm65" podUID="d23addcf-0d96-4e31-8fa7-1460f1e178d3" Jul 11 00:27:08.107000 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2711944349.mount: Deactivated successfully. Jul 11 00:27:08.273955 env[1213]: time="2025-07-11T00:27:08.273906129Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:08.280158 env[1213]: time="2025-07-11T00:27:08.277495162Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:08.285489 env[1213]: time="2025-07-11T00:27:08.285434845Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:08.290248 env[1213]: time="2025-07-11T00:27:08.288897756Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:08.290248 env[1213]: time="2025-07-11T00:27:08.289128801Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 11 00:27:08.303972 env[1213]: time="2025-07-11T00:27:08.303696179Z" level=info msg="CreateContainer within sandbox \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 11 00:27:08.317250 env[1213]: time="2025-07-11T00:27:08.317183495Z" level=info msg="CreateContainer within sandbox \"1f577d935529b7980e62794b8514313b91a26cec331f9ee9bdc7630bd8b84905\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"507e30d343741396d4dd5aec8665b98ad1570db2c73deda277a633ebee1146d2\"" Jul 11 00:27:08.319396 env[1213]: time="2025-07-11T00:27:08.317805548Z" level=info msg="StartContainer for \"507e30d343741396d4dd5aec8665b98ad1570db2c73deda277a633ebee1146d2\"" Jul 11 00:27:08.338121 systemd[1]: Started cri-containerd-507e30d343741396d4dd5aec8665b98ad1570db2c73deda277a633ebee1146d2.scope. Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384487 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 11 00:27:08.384564 kernel: audit: type=1400 audit(1752193628.383:1031): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2493 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.388940 kernel: audit: type=1300 audit(1752193628.383:1031): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2493 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.389009 kernel: audit: type=1327 audit(1752193628.383:1031): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530376533306433343337343133393664346464356165633836363562 Jul 11 00:27:08.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530376533306433343337343133393664346464356165633836363562 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.393848 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.393929 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.397519 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.397576 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.399139 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.400839 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.404464 kernel: audit: type=1400 audit(1752193628.383:1032): avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.383000 audit: BPF prog-id=143 op=LOAD Jul 11 00:27:08.383000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2493 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530376533306433343337343133393664346464356165633836363562 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.384000 audit: BPF prog-id=144 op=LOAD Jul 11 00:27:08.384000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2493 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530376533306433343337343133393664346464356165633836363562 Jul 11 00:27:08.385000 audit: BPF prog-id=144 op=UNLOAD Jul 11 00:27:08.385000 audit: BPF prog-id=143 op=UNLOAD Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:08.385000 audit: BPF prog-id=145 op=LOAD Jul 11 00:27:08.385000 audit[3184]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2493 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530376533306433343337343133393664346464356165633836363562 Jul 11 00:27:08.409702 env[1213]: time="2025-07-11T00:27:08.409658030Z" level=info msg="StartContainer for \"507e30d343741396d4dd5aec8665b98ad1570db2c73deda277a633ebee1146d2\" returns successfully" Jul 11 00:27:08.608680 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 11 00:27:08.608800 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 11 00:27:08.706326 kubelet[1941]: I0711 00:27:08.706224 1941 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:27:08.706658 kubelet[1941]: E0711 00:27:08.706561 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:08.741095 env[1213]: time="2025-07-11T00:27:08.741039738Z" level=info msg="StopPodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\"" Jul 11 00:27:08.844655 kubelet[1941]: E0711 00:27:08.844621 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:08.868000 audit[3249]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3249 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:08.868000 audit[3249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffbfd3f10 a2=0 a3=1 items=0 ppid=2050 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.868000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:08.872443 kubelet[1941]: I0711 00:27:08.871017 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-wd24c" podStartSLOduration=1.328289948 podStartE2EDuration="13.870997681s" podCreationTimestamp="2025-07-11 00:26:55 +0000 UTC" firstStartedPulling="2025-07-11 00:26:55.748217384 +0000 UTC m=+19.132610111" lastFinishedPulling="2025-07-11 00:27:08.290925117 +0000 UTC m=+31.675317844" observedRunningTime="2025-07-11 00:27:08.866765514 +0000 UTC m=+32.251158241" watchObservedRunningTime="2025-07-11 00:27:08.870997681 +0000 UTC m=+32.255390408" Jul 11 00:27:08.874000 audit[3249]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3249 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:08.874000 audit[3249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffffbfd3f10 a2=0 a3=1 items=0 ppid=2050 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:08.874000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:08.915 [INFO][3241] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:08.916 [INFO][3241] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" iface="eth0" netns="/var/run/netns/cni-6d41bc85-b424-f4fa-1c18-01079390c5b5" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:08.917 [INFO][3241] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" iface="eth0" netns="/var/run/netns/cni-6d41bc85-b424-f4fa-1c18-01079390c5b5" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:08.922 [INFO][3241] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" iface="eth0" netns="/var/run/netns/cni-6d41bc85-b424-f4fa-1c18-01079390c5b5" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:08.922 [INFO][3241] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:08.922 [INFO][3241] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.052 [INFO][3269] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.052 [INFO][3269] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.052 [INFO][3269] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.061 [WARNING][3269] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.061 [INFO][3269] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.063 [INFO][3269] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:09.066661 env[1213]: 2025-07-11 00:27:09.065 [INFO][3241] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:09.067133 env[1213]: time="2025-07-11T00:27:09.066768363Z" level=info msg="TearDown network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" successfully" Jul 11 00:27:09.067133 env[1213]: time="2025-07-11T00:27:09.066802924Z" level=info msg="StopPodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" returns successfully" Jul 11 00:27:09.107934 systemd[1]: run-netns-cni\x2d6d41bc85\x2db424\x2df4fa\x2d1c18\x2d01079390c5b5.mount: Deactivated successfully. Jul 11 00:27:09.131587 kubelet[1941]: I0711 00:27:09.131548 1941 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-ca-bundle\") pod \"d3884153-78af-4ad3-ae84-e50c525a8fa2\" (UID: \"d3884153-78af-4ad3-ae84-e50c525a8fa2\") " Jul 11 00:27:09.131722 kubelet[1941]: I0711 00:27:09.131601 1941 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sj96b\" (UniqueName: \"kubernetes.io/projected/d3884153-78af-4ad3-ae84-e50c525a8fa2-kube-api-access-sj96b\") pod \"d3884153-78af-4ad3-ae84-e50c525a8fa2\" (UID: \"d3884153-78af-4ad3-ae84-e50c525a8fa2\") " Jul 11 00:27:09.131722 kubelet[1941]: I0711 00:27:09.131628 1941 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-backend-key-pair\") pod \"d3884153-78af-4ad3-ae84-e50c525a8fa2\" (UID: \"d3884153-78af-4ad3-ae84-e50c525a8fa2\") " Jul 11 00:27:09.134307 kubelet[1941]: I0711 00:27:09.134252 1941 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "d3884153-78af-4ad3-ae84-e50c525a8fa2" (UID: "d3884153-78af-4ad3-ae84-e50c525a8fa2"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 11 00:27:09.137299 systemd[1]: var-lib-kubelet-pods-d3884153\x2d78af\x2d4ad3\x2dae84\x2de50c525a8fa2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsj96b.mount: Deactivated successfully. Jul 11 00:27:09.138798 kubelet[1941]: I0711 00:27:09.138767 1941 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d3884153-78af-4ad3-ae84-e50c525a8fa2-kube-api-access-sj96b" (OuterVolumeSpecName: "kube-api-access-sj96b") pod "d3884153-78af-4ad3-ae84-e50c525a8fa2" (UID: "d3884153-78af-4ad3-ae84-e50c525a8fa2"). InnerVolumeSpecName "kube-api-access-sj96b". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 11 00:27:09.138884 kubelet[1941]: I0711 00:27:09.138859 1941 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "d3884153-78af-4ad3-ae84-e50c525a8fa2" (UID: "d3884153-78af-4ad3-ae84-e50c525a8fa2"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 11 00:27:09.139532 systemd[1]: var-lib-kubelet-pods-d3884153\x2d78af\x2d4ad3\x2dae84\x2de50c525a8fa2-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 11 00:27:09.232260 kubelet[1941]: I0711 00:27:09.232226 1941 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-sj96b\" (UniqueName: \"kubernetes.io/projected/d3884153-78af-4ad3-ae84-e50c525a8fa2-kube-api-access-sj96b\") on node \"localhost\" DevicePath \"\"" Jul 11 00:27:09.232260 kubelet[1941]: I0711 00:27:09.232257 1941 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 11 00:27:09.232260 kubelet[1941]: I0711 00:27:09.232270 1941 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d3884153-78af-4ad3-ae84-e50c525a8fa2-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 11 00:27:09.850539 systemd[1]: Removed slice kubepods-besteffort-podd3884153_78af_4ad3_ae84_e50c525a8fa2.slice. Jul 11 00:27:09.907716 systemd[1]: Created slice kubepods-besteffort-pod4c6974b8_cfbf_4ded_8028_8c2f0ed20270.slice. Jul 11 00:27:09.935361 kubelet[1941]: I0711 00:27:09.935323 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4c6974b8-cfbf-4ded-8028-8c2f0ed20270-whisker-backend-key-pair\") pod \"whisker-6fcffbbbd-jn7jd\" (UID: \"4c6974b8-cfbf-4ded-8028-8c2f0ed20270\") " pod="calico-system/whisker-6fcffbbbd-jn7jd" Jul 11 00:27:09.935769 kubelet[1941]: I0711 00:27:09.935750 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4c6974b8-cfbf-4ded-8028-8c2f0ed20270-whisker-ca-bundle\") pod \"whisker-6fcffbbbd-jn7jd\" (UID: \"4c6974b8-cfbf-4ded-8028-8c2f0ed20270\") " pod="calico-system/whisker-6fcffbbbd-jn7jd" Jul 11 00:27:09.935930 kubelet[1941]: I0711 00:27:09.935885 1941 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gnw4n\" (UniqueName: \"kubernetes.io/projected/4c6974b8-cfbf-4ded-8028-8c2f0ed20270-kube-api-access-gnw4n\") pod \"whisker-6fcffbbbd-jn7jd\" (UID: \"4c6974b8-cfbf-4ded-8028-8c2f0ed20270\") " pod="calico-system/whisker-6fcffbbbd-jn7jd" Jul 11 00:27:10.090000 audit[3390]: AVC avc: denied { write } for pid=3390 comm="tee" name="fd" dev="proc" ino=19275 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.090000 audit[3390]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc95297eb a2=241 a3=1b6 items=1 ppid=3344 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.090000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 11 00:27:10.090000 audit: PATH item=0 name="/dev/fd/63" inode=19632 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.090000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.092000 audit[3392]: AVC avc: denied { write } for pid=3392 comm="tee" name="fd" dev="proc" ino=19279 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.092000 audit[3392]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc45e77ea a2=241 a3=1b6 items=1 ppid=3346 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.092000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 11 00:27:10.092000 audit: PATH item=0 name="/dev/fd/63" inode=18274 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.092000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.121000 audit[3407]: AVC avc: denied { write } for pid=3407 comm="tee" name="fd" dev="proc" ino=20551 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.121000 audit[3407]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc9a737d9 a2=241 a3=1b6 items=1 ppid=3331 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.121000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 11 00:27:10.121000 audit: PATH item=0 name="/dev/fd/63" inode=19287 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.121000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.127000 audit[3400]: AVC avc: denied { write } for pid=3400 comm="tee" name="fd" dev="proc" ino=20555 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.127000 audit[3400]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffea4f27e9 a2=241 a3=1b6 items=1 ppid=3340 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.127000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 11 00:27:10.127000 audit: PATH item=0 name="/dev/fd/63" inode=19633 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.127000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.143000 audit[3413]: AVC avc: denied { write } for pid=3413 comm="tee" name="fd" dev="proc" ino=19636 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.143000 audit[3413]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc3fa87e9 a2=241 a3=1b6 items=1 ppid=3332 pid=3413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.143000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 11 00:27:10.143000 audit: PATH item=0 name="/dev/fd/63" inode=19288 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.143000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.144000 audit[3386]: AVC avc: denied { write } for pid=3386 comm="tee" name="fd" dev="proc" ino=20560 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.144000 audit[3386]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcc59c7da a2=241 a3=1b6 items=1 ppid=3329 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.144000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 11 00:27:10.144000 audit: PATH item=0 name="/dev/fd/63" inode=19266 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.144000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.147000 audit[3405]: AVC avc: denied { write } for pid=3405 comm="tee" name="fd" dev="proc" ino=20564 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:27:10.147000 audit[3405]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd61cf7e9 a2=241 a3=1b6 items=1 ppid=3337 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.147000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 11 00:27:10.147000 audit: PATH item=0 name="/dev/fd/63" inode=20548 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:27:10.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.212609 env[1213]: time="2025-07-11T00:27:10.211020193Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6fcffbbbd-jn7jd,Uid:4c6974b8-cfbf-4ded-8028-8c2f0ed20270,Namespace:calico-system,Attempt:0,}" Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.209000 audit: BPF prog-id=146 op=LOAD Jul 11 00:27:10.209000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0cc74e8 a2=98 a3=ffffd0cc74d8 items=0 ppid=3341 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.209000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:27:10.213000 audit: BPF prog-id=146 op=UNLOAD Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.213000 audit: BPF prog-id=147 op=LOAD Jul 11 00:27:10.213000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0cc7398 a2=74 a3=95 items=0 ppid=3341 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.213000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:27:10.214000 audit: BPF prog-id=147 op=UNLOAD Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit: BPF prog-id=148 op=LOAD Jul 11 00:27:10.214000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0cc73c8 a2=40 a3=ffffd0cc73f8 items=0 ppid=3341 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.214000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:27:10.214000 audit: BPF prog-id=148 op=UNLOAD Jul 11 00:27:10.214000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.214000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd0cc74e0 a2=50 a3=0 items=0 ppid=3341 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.214000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.219000 audit: BPF prog-id=149 op=LOAD Jul 11 00:27:10.219000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffff77f138 a2=98 a3=ffffff77f128 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.219000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.219000 audit: BPF prog-id=149 op=UNLOAD Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit: BPF prog-id=150 op=LOAD Jul 11 00:27:10.220000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff77edc8 a2=74 a3=95 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.220000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.220000 audit: BPF prog-id=150 op=UNLOAD Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.220000 audit: BPF prog-id=151 op=LOAD Jul 11 00:27:10.220000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff77ee28 a2=94 a3=2 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.220000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.220000 audit: BPF prog-id=151 op=UNLOAD Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit: BPF prog-id=152 op=LOAD Jul 11 00:27:10.306000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff77ede8 a2=40 a3=ffffff77ee18 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.306000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.306000 audit: BPF prog-id=152 op=UNLOAD Jul 11 00:27:10.306000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.306000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffff77ef00 a2=50 a3=0 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.306000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff77ee58 a2=28 a3=ffffff77ef88 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff77ee88 a2=28 a3=ffffff77efb8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff77ed38 a2=28 a3=ffffff77ee68 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff77eea8 a2=28 a3=ffffff77efd8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff77ee88 a2=28 a3=ffffff77efb8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff77ee78 a2=28 a3=ffffff77efa8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff77eea8 a2=28 a3=ffffff77efd8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff77ee88 a2=28 a3=ffffff77efb8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff77eea8 a2=28 a3=ffffff77efd8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff77ee78 a2=28 a3=ffffff77efa8 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.316000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.316000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff77eef8 a2=28 a3=ffffff77f038 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffff77ec30 a2=50 a3=0 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.317000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit: BPF prog-id=153 op=LOAD Jul 11 00:27:10.317000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffff77ec38 a2=94 a3=5 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.317000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.317000 audit: BPF prog-id=153 op=UNLOAD Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffff77ed40 a2=50 a3=0 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.317000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffff77ee88 a2=4 a3=3 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.317000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.317000 audit[3429]: AVC avc: denied { confidentiality } for pid=3429 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:27:10.317000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff77ee68 a2=94 a3=6 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.317000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { confidentiality } for pid=3429 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:27:10.318000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff77e638 a2=94 a3=83 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.318000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { perfmon } for pid=3429 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.318000 audit[3429]: AVC avc: denied { confidentiality } for pid=3429 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:27:10.318000 audit[3429]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff77e638 a2=94 a3=83 items=0 ppid=3341 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.318000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.359000 audit: BPF prog-id=154 op=LOAD Jul 11 00:27:10.359000 audit[3465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd95633f8 a2=98 a3=ffffd95633e8 items=0 ppid=3341 pid=3465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.359000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:27:10.360000 audit: BPF prog-id=154 op=UNLOAD Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit: BPF prog-id=155 op=LOAD Jul 11 00:27:10.360000 audit[3465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd95632a8 a2=74 a3=95 items=0 ppid=3341 pid=3465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.360000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:27:10.360000 audit: BPF prog-id=155 op=UNLOAD Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { perfmon } for pid=3465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit[3465]: AVC avc: denied { bpf } for pid=3465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.360000 audit: BPF prog-id=156 op=LOAD Jul 11 00:27:10.360000 audit[3465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd95632d8 a2=40 a3=ffffd9563308 items=0 ppid=3341 pid=3465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.360000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:27:10.360000 audit: BPF prog-id=156 op=UNLOAD Jul 11 00:27:10.422686 systemd-networkd[1050]: vxlan.calico: Link UP Jul 11 00:27:10.422696 systemd-networkd[1050]: vxlan.calico: Gained carrier Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit: BPF prog-id=157 op=LOAD Jul 11 00:27:10.453000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd597d3f8 a2=98 a3=ffffd597d3e8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.453000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.453000 audit: BPF prog-id=157 op=UNLOAD Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit: BPF prog-id=158 op=LOAD Jul 11 00:27:10.453000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd597d0d8 a2=74 a3=95 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.453000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.453000 audit: BPF prog-id=158 op=UNLOAD Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit: BPF prog-id=159 op=LOAD Jul 11 00:27:10.453000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd597d138 a2=94 a3=2 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.453000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.453000 audit: BPF prog-id=159 op=UNLOAD Jul 11 00:27:10.453000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.453000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd597d168 a2=28 a3=ffffd597d298 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.453000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd597d198 a2=28 a3=ffffd597d2c8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd597d048 a2=28 a3=ffffd597d178 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd597d1b8 a2=28 a3=ffffd597d2e8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd597d198 a2=28 a3=ffffd597d2c8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd597d188 a2=28 a3=ffffd597d2b8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd597d1b8 a2=28 a3=ffffd597d2e8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd597d198 a2=28 a3=ffffd597d2c8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd597d1b8 a2=28 a3=ffffd597d2e8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd597d188 a2=28 a3=ffffd597d2b8 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd597d208 a2=28 a3=ffffd597d348 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit: BPF prog-id=160 op=LOAD Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd597d028 a2=40 a3=ffffd597d058 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit: BPF prog-id=160 op=UNLOAD Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd597d050 a2=50 a3=0 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffd597d050 a2=50 a3=0 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit: BPF prog-id=161 op=LOAD Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd597c7b8 a2=94 a3=2 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.454000 audit: BPF prog-id=161 op=UNLOAD Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.454000 audit: BPF prog-id=162 op=LOAD Jul 11 00:27:10.454000 audit[3502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd597c948 a2=94 a3=30 items=0 ppid=3341 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.454000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit: BPF prog-id=163 op=LOAD Jul 11 00:27:10.457000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffffe13608 a2=98 a3=ffffffe135f8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.457000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.457000 audit: BPF prog-id=163 op=UNLOAD Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit: BPF prog-id=164 op=LOAD Jul 11 00:27:10.457000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffffe13298 a2=74 a3=95 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.457000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.457000 audit: BPF prog-id=164 op=UNLOAD Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.457000 audit: BPF prog-id=165 op=LOAD Jul 11 00:27:10.457000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffffe132f8 a2=94 a3=2 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.457000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.458000 audit: BPF prog-id=165 op=UNLOAD Jul 11 00:27:10.471556 systemd-networkd[1050]: cali101e3340f47: Link UP Jul 11 00:27:10.474365 systemd-networkd[1050]: cali101e3340f47: Gained carrier Jul 11 00:27:10.475306 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali101e3340f47: link becomes ready Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.367 [INFO][3433] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0 whisker-6fcffbbbd- calico-system 4c6974b8-cfbf-4ded-8028-8c2f0ed20270 896 0 2025-07-11 00:27:09 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6fcffbbbd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-6fcffbbbd-jn7jd eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali101e3340f47 [] [] }} ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.367 [INFO][3433] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.403 [INFO][3477] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" HandleID="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Workload="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.403 [INFO][3477] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" HandleID="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Workload="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000581150), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-6fcffbbbd-jn7jd", "timestamp":"2025-07-11 00:27:10.40375855 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.404 [INFO][3477] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.404 [INFO][3477] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.404 [INFO][3477] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.415 [INFO][3477] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.438 [INFO][3477] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.444 [INFO][3477] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.446 [INFO][3477] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.448 [INFO][3477] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.448 [INFO][3477] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.449 [INFO][3477] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.454 [INFO][3477] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.462 [INFO][3477] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.462 [INFO][3477] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" host="localhost" Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.462 [INFO][3477] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:10.494058 env[1213]: 2025-07-11 00:27:10.462 [INFO][3477] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" HandleID="k8s-pod-network.c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Workload="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.494939 env[1213]: 2025-07-11 00:27:10.469 [INFO][3433] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0", GenerateName:"whisker-6fcffbbbd-", Namespace:"calico-system", SelfLink:"", UID:"4c6974b8-cfbf-4ded-8028-8c2f0ed20270", ResourceVersion:"896", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 27, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6fcffbbbd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-6fcffbbbd-jn7jd", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali101e3340f47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:10.494939 env[1213]: 2025-07-11 00:27:10.469 [INFO][3433] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.494939 env[1213]: 2025-07-11 00:27:10.469 [INFO][3433] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali101e3340f47 ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.494939 env[1213]: 2025-07-11 00:27:10.479 [INFO][3433] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.494939 env[1213]: 2025-07-11 00:27:10.479 [INFO][3433] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0", GenerateName:"whisker-6fcffbbbd-", Namespace:"calico-system", SelfLink:"", UID:"4c6974b8-cfbf-4ded-8028-8c2f0ed20270", ResourceVersion:"896", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 27, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6fcffbbbd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f", Pod:"whisker-6fcffbbbd-jn7jd", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali101e3340f47", MAC:"e6:c6:67:c2:10:3a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:10.494939 env[1213]: 2025-07-11 00:27:10.490 [INFO][3433] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f" Namespace="calico-system" Pod="whisker-6fcffbbbd-jn7jd" WorkloadEndpoint="localhost-k8s-whisker--6fcffbbbd--jn7jd-eth0" Jul 11 00:27:10.504537 env[1213]: time="2025-07-11T00:27:10.504459431Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:10.504537 env[1213]: time="2025-07-11T00:27:10.504519792Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:10.504537 env[1213]: time="2025-07-11T00:27:10.504530272Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:10.504710 env[1213]: time="2025-07-11T00:27:10.504682995Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f pid=3527 runtime=io.containerd.runc.v2 Jul 11 00:27:10.533870 systemd[1]: Started cri-containerd-c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f.scope. Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit: BPF prog-id=166 op=LOAD Jul 11 00:27:10.553000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffffe132b8 a2=40 a3=ffffffe132e8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.553000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.553000 audit: BPF prog-id=166 op=UNLOAD Jul 11 00:27:10.553000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.553000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffffe133d0 a2=50 a3=0 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.553000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffffe13328 a2=28 a3=ffffffe13458 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffffe13358 a2=28 a3=ffffffe13488 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffffe13208 a2=28 a3=ffffffe13338 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffffe13378 a2=28 a3=ffffffe134a8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffffe13358 a2=28 a3=ffffffe13488 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffffe13348 a2=28 a3=ffffffe13478 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffffe13378 a2=28 a3=ffffffe134a8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffffe13358 a2=28 a3=ffffffe13488 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffffe13378 a2=28 a3=ffffffe134a8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffffe13348 a2=28 a3=ffffffe13478 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.562000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.562000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffffe133c8 a2=28 a3=ffffffe13508 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.562000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffffe13100 a2=50 a3=0 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit: BPF prog-id=167 op=LOAD Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffffe13108 a2=94 a3=5 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit: BPF prog-id=167 op=UNLOAD Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffffe13210 a2=50 a3=0 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffffe13358 a2=4 a3=3 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { confidentiality } for pid=3505 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffffe13338 a2=94 a3=6 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { confidentiality } for pid=3505 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffffe12b08 a2=94 a3=83 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { confidentiality } for pid=3505 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffffe12b08 a2=94 a3=83 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.563000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.563000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffffe14548 a2=10 a3=ffffffe14638 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.563000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffffe14408 a2=10 a3=ffffffe144f8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit: BPF prog-id=168 op=LOAD Jul 11 00:27:10.564000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffffe14378 a2=10 a3=ffffffe144f8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.564000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffffe14378 a2=10 a3=ffffffe144f8 items=0 ppid=3341 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3527 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339653030373839333362656534313037353936383835326139663937 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3527 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339653030373839333362656534313037353936383835326139663937 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit: BPF prog-id=169 op=LOAD Jul 11 00:27:10.564000 audit[3538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3527 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339653030373839333362656534313037353936383835326139663937 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit: BPF prog-id=170 op=LOAD Jul 11 00:27:10.564000 audit[3538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3527 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339653030373839333362656534313037353936383835326139663937 Jul 11 00:27:10.564000 audit: BPF prog-id=170 op=UNLOAD Jul 11 00:27:10.564000 audit: BPF prog-id=169 op=UNLOAD Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { perfmon } for pid=3538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit[3538]: AVC avc: denied { bpf } for pid=3538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:10.564000 audit: BPF prog-id=171 op=LOAD Jul 11 00:27:10.564000 audit[3538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3527 pid=3538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339653030373839333362656534313037353936383835326139663937 Jul 11 00:27:10.565857 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:10.569000 audit: BPF prog-id=162 op=UNLOAD Jul 11 00:27:10.586911 env[1213]: time="2025-07-11T00:27:10.586861723Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6fcffbbbd-jn7jd,Uid:4c6974b8-cfbf-4ded-8028-8c2f0ed20270,Namespace:calico-system,Attempt:0,} returns sandbox id \"c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f\"" Jul 11 00:27:10.589196 env[1213]: time="2025-07-11T00:27:10.589154887Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 11 00:27:10.625000 audit[3582]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3582 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:10.625000 audit[3582]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffff5c53500 a2=0 a3=ffffac6c9fa8 items=0 ppid=3341 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.625000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:10.630000 audit[3584]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3584 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:10.630000 audit[3584]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd7f0df20 a2=0 a3=ffffa000efa8 items=0 ppid=3341 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.630000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:10.632000 audit[3587]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3587 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:10.632000 audit[3587]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=fffff518bcf0 a2=0 a3=ffff82801fa8 items=0 ppid=3341 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.632000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:10.638000 audit[3583]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3583 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:10.638000 audit[3583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffc0049d90 a2=0 a3=ffffbc419fa8 items=0 ppid=3341 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.638000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:10.662000 audit[3593]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3593 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:10.662000 audit[3593]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=ffffc043d4d0 a2=0 a3=ffffb46aafa8 items=0 ppid=3341 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:10.662000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:10.714013 kubelet[1941]: I0711 00:27:10.713971 1941 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="d3884153-78af-4ad3-ae84-e50c525a8fa2" path="/var/lib/kubelet/pods/d3884153-78af-4ad3-ae84-e50c525a8fa2/volumes" Jul 11 00:27:11.449513 env[1213]: time="2025-07-11T00:27:11.449454492Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:11.451100 env[1213]: time="2025-07-11T00:27:11.451060362Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:11.454493 env[1213]: time="2025-07-11T00:27:11.454457425Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:11.455806 env[1213]: time="2025-07-11T00:27:11.455776929Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:11.456480 env[1213]: time="2025-07-11T00:27:11.456448661Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 11 00:27:11.458521 env[1213]: time="2025-07-11T00:27:11.458485219Z" level=info msg="CreateContainer within sandbox \"c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 11 00:27:11.478517 env[1213]: time="2025-07-11T00:27:11.478455747Z" level=info msg="CreateContainer within sandbox \"c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"bd8d9930b54a8d3046e728249b5c69db6f80c5d195dcb1d7682e7f07c37a475b\"" Jul 11 00:27:11.479381 env[1213]: time="2025-07-11T00:27:11.479337483Z" level=info msg="StartContainer for \"bd8d9930b54a8d3046e728249b5c69db6f80c5d195dcb1d7682e7f07c37a475b\"" Jul 11 00:27:11.508650 systemd[1]: Started cri-containerd-bd8d9930b54a8d3046e728249b5c69db6f80c5d195dcb1d7682e7f07c37a475b.scope. Jul 11 00:27:11.526047 systemd-networkd[1050]: cali101e3340f47: Gained IPv6LL Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit: BPF prog-id=172 op=LOAD Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3527 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:11.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264386439393330623534613864333034366537323832343962356336 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3527 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:11.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264386439393330623534613864333034366537323832343962356336 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit: BPF prog-id=173 op=LOAD Jul 11 00:27:11.543000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3527 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:11.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264386439393330623534613864333034366537323832343962356336 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit: BPF prog-id=174 op=LOAD Jul 11 00:27:11.543000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3527 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:11.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264386439393330623534613864333034366537323832343962356336 Jul 11 00:27:11.543000 audit: BPF prog-id=174 op=UNLOAD Jul 11 00:27:11.543000 audit: BPF prog-id=173 op=UNLOAD Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:11.543000 audit: BPF prog-id=175 op=LOAD Jul 11 00:27:11.543000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3527 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:11.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264386439393330623534613864333034366537323832343962356336 Jul 11 00:27:11.563666 env[1213]: time="2025-07-11T00:27:11.563613517Z" level=info msg="StartContainer for \"bd8d9930b54a8d3046e728249b5c69db6f80c5d195dcb1d7682e7f07c37a475b\" returns successfully" Jul 11 00:27:11.566153 env[1213]: time="2025-07-11T00:27:11.566121484Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 11 00:27:11.579000 audit[3641]: AVC avc: denied { search } for pid=3641 comm="nginx" name="crypto" dev="proc" ino=20817 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c885 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 11 00:27:11.579000 audit[3641]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffa5630958 a2=0 a3=0 items=0 ppid=3527 pid=3641 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c885 key=(null) Jul 11 00:27:11.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 11 00:27:11.716698 systemd-networkd[1050]: vxlan.calico: Gained IPv6LL Jul 11 00:27:12.975942 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4196380525.mount: Deactivated successfully. Jul 11 00:27:13.020562 env[1213]: time="2025-07-11T00:27:13.020513119Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:13.022093 env[1213]: time="2025-07-11T00:27:13.022057346Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:13.023602 env[1213]: time="2025-07-11T00:27:13.023573692Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:13.024752 env[1213]: time="2025-07-11T00:27:13.024720432Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:13.025938 env[1213]: time="2025-07-11T00:27:13.025895892Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 11 00:27:13.029379 env[1213]: time="2025-07-11T00:27:13.029343192Z" level=info msg="CreateContainer within sandbox \"c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 11 00:27:13.040812 env[1213]: time="2025-07-11T00:27:13.040771469Z" level=info msg="CreateContainer within sandbox \"c9e0078933bee41075968852a9f979ecff5ae83d0ca1e5b0074290f0e88e568f\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"98f99ce7c09cb097470148548a116f4b6ceae3e40771dd05b8d6248e636a0e8f\"" Jul 11 00:27:13.041318 env[1213]: time="2025-07-11T00:27:13.041179116Z" level=info msg="StartContainer for \"98f99ce7c09cb097470148548a116f4b6ceae3e40771dd05b8d6248e636a0e8f\"" Jul 11 00:27:13.061180 systemd[1]: Started cri-containerd-98f99ce7c09cb097470148548a116f4b6ceae3e40771dd05b8d6248e636a0e8f.scope. Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit: BPF prog-id=176 op=LOAD Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3527 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663939636537633039636230393734373031343835343861313136 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3527 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663939636537633039636230393734373031343835343861313136 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit: BPF prog-id=177 op=LOAD Jul 11 00:27:13.116000 audit[3671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3527 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663939636537633039636230393734373031343835343861313136 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.116000 audit: BPF prog-id=178 op=LOAD Jul 11 00:27:13.116000 audit[3671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3527 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663939636537633039636230393734373031343835343861313136 Jul 11 00:27:13.117000 audit: BPF prog-id=178 op=UNLOAD Jul 11 00:27:13.117000 audit: BPF prog-id=177 op=UNLOAD Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:13.117000 audit: BPF prog-id=179 op=LOAD Jul 11 00:27:13.117000 audit[3671]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3527 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938663939636537633039636230393734373031343835343861313136 Jul 11 00:27:13.141601 env[1213]: time="2025-07-11T00:27:13.141547290Z" level=info msg="StartContainer for \"98f99ce7c09cb097470148548a116f4b6ceae3e40771dd05b8d6248e636a0e8f\" returns successfully" Jul 11 00:27:13.876654 kubelet[1941]: I0711 00:27:13.876605 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6fcffbbbd-jn7jd" podStartSLOduration=2.438345198 podStartE2EDuration="4.876582151s" podCreationTimestamp="2025-07-11 00:27:09 +0000 UTC" firstStartedPulling="2025-07-11 00:27:10.588337631 +0000 UTC m=+33.972730358" lastFinishedPulling="2025-07-11 00:27:13.026574584 +0000 UTC m=+36.410967311" observedRunningTime="2025-07-11 00:27:13.876461869 +0000 UTC m=+37.260854556" watchObservedRunningTime="2025-07-11 00:27:13.876582151 +0000 UTC m=+37.260974878" Jul 11 00:27:13.885000 audit[3703]: NETFILTER_CFG table=filter:106 family=2 entries=19 op=nft_register_rule pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:13.887536 kernel: kauditd_printk_skb: 773 callbacks suppressed Jul 11 00:27:13.887598 kernel: audit: type=1325 audit(1752193633.885:1204): table=filter:106 family=2 entries=19 op=nft_register_rule pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:13.885000 audit[3703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffecf36f80 a2=0 a3=1 items=0 ppid=2050 pid=3703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.891722 kernel: audit: type=1300 audit(1752193633.885:1204): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffecf36f80 a2=0 a3=1 items=0 ppid=2050 pid=3703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.891778 kernel: audit: type=1327 audit(1752193633.885:1204): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:13.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:13.893000 audit[3703]: NETFILTER_CFG table=nat:107 family=2 entries=21 op=nft_register_chain pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:13.893000 audit[3703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffecf36f80 a2=0 a3=1 items=0 ppid=2050 pid=3703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.898954 kernel: audit: type=1325 audit(1752193633.893:1205): table=nat:107 family=2 entries=21 op=nft_register_chain pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:13.899000 kernel: audit: type=1300 audit(1752193633.893:1205): arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffecf36f80 a2=0 a3=1 items=0 ppid=2050 pid=3703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:13.899026 kernel: audit: type=1327 audit(1752193633.893:1205): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:13.893000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:15.240425 systemd[1]: Started sshd@7-10.0.0.54:22-10.0.0.1:59156.service. Jul 11 00:27:15.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.54:22-10.0.0.1:59156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:15.244234 kernel: audit: type=1130 audit(1752193635.239:1206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.54:22-10.0.0.1:59156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:15.287000 audit[3711]: USER_ACCT pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.289197 sshd[3711]: Accepted publickey for core from 10.0.0.1 port 59156 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:15.290918 sshd[3711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:15.289000 audit[3711]: CRED_ACQ pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.293813 kernel: audit: type=1101 audit(1752193635.287:1207): pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.293867 kernel: audit: type=1103 audit(1752193635.289:1208): pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.293899 kernel: audit: type=1006 audit(1752193635.289:1209): pid=3711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 11 00:27:15.289000 audit[3711]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedd15310 a2=3 a3=1 items=0 ppid=1 pid=3711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:15.289000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:15.298250 systemd[1]: Started session-8.scope. Jul 11 00:27:15.298573 systemd-logind[1202]: New session 8 of user core. Jul 11 00:27:15.302000 audit[3711]: USER_START pid=3711 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.303000 audit[3713]: CRED_ACQ pid=3713 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.481515 sshd[3711]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:15.481000 audit[3711]: USER_END pid=3711 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.481000 audit[3711]: CRED_DISP pid=3711 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:15.483902 systemd[1]: session-8.scope: Deactivated successfully. Jul 11 00:27:15.484745 systemd-logind[1202]: Session 8 logged out. Waiting for processes to exit. Jul 11 00:27:15.484876 systemd[1]: sshd@7-10.0.0.54:22-10.0.0.1:59156.service: Deactivated successfully. Jul 11 00:27:15.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.54:22-10.0.0.1:59156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:15.486188 systemd-logind[1202]: Removed session 8. Jul 11 00:27:15.713345 env[1213]: time="2025-07-11T00:27:15.712962028Z" level=info msg="StopPodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\"" Jul 11 00:27:15.713345 env[1213]: time="2025-07-11T00:27:15.713031589Z" level=info msg="StopPodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\"" Jul 11 00:27:15.713345 env[1213]: time="2025-07-11T00:27:15.713118951Z" level=info msg="StopPodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\"" Jul 11 00:27:15.713717 env[1213]: time="2025-07-11T00:27:15.713403435Z" level=info msg="StopPodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\"" Jul 11 00:27:15.713717 env[1213]: time="2025-07-11T00:27:15.713039870Z" level=info msg="StopPodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\"" Jul 11 00:27:15.713901 env[1213]: time="2025-07-11T00:27:15.713868763Z" level=info msg="StopPodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\"" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.818 [INFO][3799] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.818 [INFO][3799] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" iface="eth0" netns="/var/run/netns/cni-f238b2bb-81d8-85d6-1c63-74c2d641dd1f" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.818 [INFO][3799] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" iface="eth0" netns="/var/run/netns/cni-f238b2bb-81d8-85d6-1c63-74c2d641dd1f" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.819 [INFO][3799] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" iface="eth0" netns="/var/run/netns/cni-f238b2bb-81d8-85d6-1c63-74c2d641dd1f" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.819 [INFO][3799] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.819 [INFO][3799] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.863 [INFO][3844] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.863 [INFO][3844] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.864 [INFO][3844] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.878 [WARNING][3844] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.878 [INFO][3844] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.880 [INFO][3844] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:15.888378 env[1213]: 2025-07-11 00:27:15.885 [INFO][3799] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:15.890682 env[1213]: time="2025-07-11T00:27:15.890632877Z" level=info msg="TearDown network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" successfully" Jul 11 00:27:15.890682 env[1213]: time="2025-07-11T00:27:15.890679838Z" level=info msg="StopPodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" returns successfully" Jul 11 00:27:15.890666 systemd[1]: run-netns-cni\x2df238b2bb\x2d81d8\x2d85d6\x2d1c63\x2d74c2d641dd1f.mount: Deactivated successfully. Jul 11 00:27:15.891029 kubelet[1941]: E0711 00:27:15.891001 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:15.891572 env[1213]: time="2025-07-11T00:27:15.891537852Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xzph5,Uid:5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad,Namespace:kube-system,Attempt:1,}" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.818 [INFO][3801] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.819 [INFO][3801] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" iface="eth0" netns="/var/run/netns/cni-111749e7-367b-bce8-78ca-8ccfd3d1c742" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.820 [INFO][3801] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" iface="eth0" netns="/var/run/netns/cni-111749e7-367b-bce8-78ca-8ccfd3d1c742" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.820 [INFO][3801] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" iface="eth0" netns="/var/run/netns/cni-111749e7-367b-bce8-78ca-8ccfd3d1c742" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.820 [INFO][3801] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.820 [INFO][3801] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.875 [INFO][3846] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.876 [INFO][3846] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.880 [INFO][3846] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.894 [WARNING][3846] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.894 [INFO][3846] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.896 [INFO][3846] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:15.900531 env[1213]: 2025-07-11 00:27:15.898 [INFO][3801] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:15.903417 env[1213]: time="2025-07-11T00:27:15.903358764Z" level=info msg="TearDown network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" successfully" Jul 11 00:27:15.903417 env[1213]: time="2025-07-11T00:27:15.903408685Z" level=info msg="StopPodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" returns successfully" Jul 11 00:27:15.903765 kubelet[1941]: E0711 00:27:15.903738 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:15.905360 systemd[1]: run-netns-cni\x2d111749e7\x2d367b\x2dbce8\x2d78ca\x2d8ccfd3d1c742.mount: Deactivated successfully. Jul 11 00:27:15.908237 env[1213]: time="2025-07-11T00:27:15.907640593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-m97fq,Uid:d13d205f-ef30-472a-ac7f-86f872056c53,Namespace:kube-system,Attempt:1,}" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.823 [INFO][3800] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.823 [INFO][3800] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" iface="eth0" netns="/var/run/netns/cni-29538a18-24da-ef94-d121-49f0983949b1" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.823 [INFO][3800] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" iface="eth0" netns="/var/run/netns/cni-29538a18-24da-ef94-d121-49f0983949b1" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.823 [INFO][3800] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" iface="eth0" netns="/var/run/netns/cni-29538a18-24da-ef94-d121-49f0983949b1" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.823 [INFO][3800] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.824 [INFO][3800] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.906 [INFO][3859] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.906 [INFO][3859] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.906 [INFO][3859] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.926 [WARNING][3859] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.926 [INFO][3859] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.931 [INFO][3859] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:15.935158 env[1213]: 2025-07-11 00:27:15.933 [INFO][3800] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:15.939102 env[1213]: time="2025-07-11T00:27:15.937558400Z" level=info msg="TearDown network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" successfully" Jul 11 00:27:15.939102 env[1213]: time="2025-07-11T00:27:15.937598481Z" level=info msg="StopPodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" returns successfully" Jul 11 00:27:15.938121 systemd[1]: run-netns-cni\x2d29538a18\x2d24da\x2def94\x2dd121\x2d49f0983949b1.mount: Deactivated successfully. Jul 11 00:27:15.939455 env[1213]: time="2025-07-11T00:27:15.939272348Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-ts4sp,Uid:311c407f-000e-45a9-abaa-20e369f1001f,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.854 [INFO][3802] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.859 [INFO][3802] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" iface="eth0" netns="/var/run/netns/cni-524d191d-9eb5-e371-803e-f1a58da9ed60" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.859 [INFO][3802] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" iface="eth0" netns="/var/run/netns/cni-524d191d-9eb5-e371-803e-f1a58da9ed60" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.859 [INFO][3802] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" iface="eth0" netns="/var/run/netns/cni-524d191d-9eb5-e371-803e-f1a58da9ed60" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.859 [INFO][3802] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.859 [INFO][3802] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.912 [INFO][3873] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.912 [INFO][3873] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.933 [INFO][3873] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.949 [WARNING][3873] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.949 [INFO][3873] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.951 [INFO][3873] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:15.962343 env[1213]: 2025-07-11 00:27:15.955 [INFO][3802] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:15.962757 env[1213]: time="2025-07-11T00:27:15.962623327Z" level=info msg="TearDown network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" successfully" Jul 11 00:27:15.962757 env[1213]: time="2025-07-11T00:27:15.962655088Z" level=info msg="StopPodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" returns successfully" Jul 11 00:27:15.963869 env[1213]: time="2025-07-11T00:27:15.963773346Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-lbsrl,Uid:22590bf7-c35e-4aef-831c-d97c50f394c2,Namespace:calico-system,Attempt:1,}" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.857 [INFO][3819] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.857 [INFO][3819] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" iface="eth0" netns="/var/run/netns/cni-1b6b04cf-7df1-3db1-1be6-6298c95781dc" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.858 [INFO][3819] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" iface="eth0" netns="/var/run/netns/cni-1b6b04cf-7df1-3db1-1be6-6298c95781dc" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.858 [INFO][3819] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" iface="eth0" netns="/var/run/netns/cni-1b6b04cf-7df1-3db1-1be6-6298c95781dc" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.859 [INFO][3819] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.859 [INFO][3819] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.924 [INFO][3879] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.924 [INFO][3879] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.951 [INFO][3879] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.962 [WARNING][3879] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.962 [INFO][3879] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.965 [INFO][3879] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:15.974422 env[1213]: 2025-07-11 00:27:15.971 [INFO][3819] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:15.974841 env[1213]: time="2025-07-11T00:27:15.974541681Z" level=info msg="TearDown network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" successfully" Jul 11 00:27:15.974841 env[1213]: time="2025-07-11T00:27:15.974570802Z" level=info msg="StopPodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" returns successfully" Jul 11 00:27:15.975680 env[1213]: time="2025-07-11T00:27:15.975597418Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7cbb9bcc9f-ff556,Uid:8dd2b46e-3124-43b5-a369-e2370d59a903,Namespace:calico-system,Attempt:1,}" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.835 [INFO][3794] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.837 [INFO][3794] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" iface="eth0" netns="/var/run/netns/cni-75ef73ba-1b37-7dcc-87e2-730fc6900066" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.837 [INFO][3794] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" iface="eth0" netns="/var/run/netns/cni-75ef73ba-1b37-7dcc-87e2-730fc6900066" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.839 [INFO][3794] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" iface="eth0" netns="/var/run/netns/cni-75ef73ba-1b37-7dcc-87e2-730fc6900066" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.839 [INFO][3794] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.839 [INFO][3794] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.943 [INFO][3866] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.943 [INFO][3866] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.965 [INFO][3866] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.976 [WARNING][3866] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.976 [INFO][3866] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.978 [INFO][3866] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:15.983687 env[1213]: 2025-07-11 00:27:15.980 [INFO][3794] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:15.984258 env[1213]: time="2025-07-11T00:27:15.984207878Z" level=info msg="TearDown network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" successfully" Jul 11 00:27:15.984811 env[1213]: time="2025-07-11T00:27:15.984304000Z" level=info msg="StopPodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" returns successfully" Jul 11 00:27:15.984910 env[1213]: time="2025-07-11T00:27:15.984876409Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-5xrz7,Uid:a2f06025-1162-4925-a86c-399f3bdfe4ae,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:27:16.114524 systemd-networkd[1050]: cali2f102e2f93a: Link UP Jul 11 00:27:16.117142 systemd-networkd[1050]: cali2f102e2f93a: Gained carrier Jul 11 00:27:16.117322 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:27:16.117371 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2f102e2f93a: link becomes ready Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.005 [INFO][3896] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--xzph5-eth0 coredns-668d6bf9bc- kube-system 5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad 969 0 2025-07-11 00:26:43 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-xzph5 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2f102e2f93a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.005 [INFO][3896] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.055 [INFO][3957] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" HandleID="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.055 [INFO][3957] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" HandleID="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c6b0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-xzph5", "timestamp":"2025-07-11 00:27:16.055629054 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.056 [INFO][3957] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.056 [INFO][3957] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.056 [INFO][3957] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.069 [INFO][3957] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.074 [INFO][3957] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.080 [INFO][3957] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.085 [INFO][3957] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.088 [INFO][3957] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.088 [INFO][3957] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.093 [INFO][3957] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.098 [INFO][3957] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.104 [INFO][3957] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.104 [INFO][3957] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" host="localhost" Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.104 [INFO][3957] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.130518 env[1213]: 2025-07-11 00:27:16.104 [INFO][3957] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" HandleID="k8s-pod-network.1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.131268 env[1213]: 2025-07-11 00:27:16.107 [INFO][3896] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--xzph5-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-xzph5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2f102e2f93a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.131268 env[1213]: 2025-07-11 00:27:16.108 [INFO][3896] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.131268 env[1213]: 2025-07-11 00:27:16.108 [INFO][3896] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2f102e2f93a ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.131268 env[1213]: 2025-07-11 00:27:16.117 [INFO][3896] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.131268 env[1213]: 2025-07-11 00:27:16.118 [INFO][3896] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--xzph5-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe", Pod:"coredns-668d6bf9bc-xzph5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2f102e2f93a", MAC:"92:2c:74:ef:75:dd", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.131268 env[1213]: 2025-07-11 00:27:16.128 [INFO][3896] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe" Namespace="kube-system" Pod="coredns-668d6bf9bc-xzph5" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:16.149558 env[1213]: time="2025-07-11T00:27:16.149464057Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:16.149558 env[1213]: time="2025-07-11T00:27:16.149516698Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:16.149558 env[1213]: time="2025-07-11T00:27:16.149527538Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:16.149758 env[1213]: time="2025-07-11T00:27:16.149662500Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe pid=4049 runtime=io.containerd.runc.v2 Jul 11 00:27:16.156000 audit[4067]: NETFILTER_CFG table=filter:108 family=2 entries=42 op=nft_register_chain pid=4067 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:16.156000 audit[4067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffe1480e30 a2=0 a3=ffffa3909fa8 items=0 ppid=3341 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.156000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:16.163050 systemd[1]: Started cri-containerd-1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe.scope. Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.190000 audit: BPF prog-id=180 op=LOAD Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623462373735326630373439333637643562343833623265356134 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623462373735326630373439333637643562343833623265356134 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.191000 audit: BPF prog-id=181 op=LOAD Jul 11 00:27:16.191000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623462373735326630373439333637643562343833623265356134 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit: BPF prog-id=182 op=LOAD Jul 11 00:27:16.192000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623462373735326630373439333637643562343833623265356134 Jul 11 00:27:16.192000 audit: BPF prog-id=182 op=UNLOAD Jul 11 00:27:16.192000 audit: BPF prog-id=181 op=UNLOAD Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.192000 audit: BPF prog-id=183 op=LOAD Jul 11 00:27:16.192000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623462373735326630373439333637643562343833623265356134 Jul 11 00:27:16.195183 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:16.216128 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliadf02203129: link becomes ready Jul 11 00:27:16.216947 systemd-networkd[1050]: caliadf02203129: Link UP Jul 11 00:27:16.221503 systemd-networkd[1050]: caliadf02203129: Gained carrier Jul 11 00:27:16.234592 env[1213]: time="2025-07-11T00:27:16.234351278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xzph5,Uid:5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad,Namespace:kube-system,Attempt:1,} returns sandbox id \"1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe\"" Jul 11 00:27:16.236002 kubelet[1941]: E0711 00:27:16.235398 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:16.240590 env[1213]: time="2025-07-11T00:27:16.240522095Z" level=info msg="CreateContainer within sandbox \"1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.041 [INFO][3935] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0 goldmane-768f4c5c69- calico-system 22590bf7-c35e-4aef-831c-d97c50f394c2 971 0 2025-07-11 00:26:55 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-lbsrl eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] caliadf02203129 [] [] }} ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.042 [INFO][3935] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.105 [INFO][3991] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" HandleID="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.105 [INFO][3991] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" HandleID="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400011e390), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-lbsrl", "timestamp":"2025-07-11 00:27:16.105113276 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.105 [INFO][3991] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.105 [INFO][3991] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.105 [INFO][3991] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.172 [INFO][3991] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.182 [INFO][3991] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.191 [INFO][3991] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.192 [INFO][3991] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.195 [INFO][3991] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.195 [INFO][3991] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.197 [INFO][3991] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.201 [INFO][3991] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.209 [INFO][3991] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.209 [INFO][3991] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" host="localhost" Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.209 [INFO][3991] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.246171 env[1213]: 2025-07-11 00:27:16.209 [INFO][3991] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" HandleID="k8s-pod-network.65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.246764 env[1213]: 2025-07-11 00:27:16.212 [INFO][3935] cni-plugin/k8s.go 418: Populated endpoint ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"22590bf7-c35e-4aef-831c-d97c50f394c2", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-lbsrl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliadf02203129", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.246764 env[1213]: 2025-07-11 00:27:16.212 [INFO][3935] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.246764 env[1213]: 2025-07-11 00:27:16.212 [INFO][3935] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliadf02203129 ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.246764 env[1213]: 2025-07-11 00:27:16.215 [INFO][3935] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.246764 env[1213]: 2025-07-11 00:27:16.216 [INFO][3935] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"22590bf7-c35e-4aef-831c-d97c50f394c2", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df", Pod:"goldmane-768f4c5c69-lbsrl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliadf02203129", MAC:"36:7c:68:2d:1d:f9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.246764 env[1213]: 2025-07-11 00:27:16.242 [INFO][3935] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df" Namespace="calico-system" Pod="goldmane-768f4c5c69-lbsrl" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:16.245000 audit[4091]: NETFILTER_CFG table=filter:109 family=2 entries=48 op=nft_register_chain pid=4091 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:16.245000 audit[4091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26368 a0=3 a1=ffffe1aaa0e0 a2=0 a3=ffff81f08fa8 items=0 ppid=3341 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.245000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:16.257173 env[1213]: time="2025-07-11T00:27:16.257106237Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:16.257375 env[1213]: time="2025-07-11T00:27:16.257350001Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:16.257493 env[1213]: time="2025-07-11T00:27:16.257469763Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:16.257792 env[1213]: time="2025-07-11T00:27:16.257757807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df pid=4103 runtime=io.containerd.runc.v2 Jul 11 00:27:16.261516 env[1213]: time="2025-07-11T00:27:16.261475786Z" level=info msg="CreateContainer within sandbox \"1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"52c970f37d92beb513a742b923463da96d61c57eb7f301f60dabdaae7610b4c6\"" Jul 11 00:27:16.262542 env[1213]: time="2025-07-11T00:27:16.262510442Z" level=info msg="StartContainer for \"52c970f37d92beb513a742b923463da96d61c57eb7f301f60dabdaae7610b4c6\"" Jul 11 00:27:16.270527 systemd[1]: Started cri-containerd-65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df.scope. Jul 11 00:27:16.285297 systemd[1]: Started cri-containerd-52c970f37d92beb513a742b923463da96d61c57eb7f301f60dabdaae7610b4c6.scope. Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.306000 audit: BPF prog-id=184 op=LOAD Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4103 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635626135316531633435616334653463376135396136326366613134 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4103 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635626135316531633435616334653463376135396136326366613134 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit: BPF prog-id=185 op=LOAD Jul 11 00:27:16.307000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4103 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635626135316531633435616334653463376135396136326366613134 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit: BPF prog-id=186 op=LOAD Jul 11 00:27:16.307000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4103 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635626135316531633435616334653463376135396136326366613134 Jul 11 00:27:16.307000 audit: BPF prog-id=186 op=UNLOAD Jul 11 00:27:16.307000 audit: BPF prog-id=185 op=UNLOAD Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.307000 audit: BPF prog-id=187 op=LOAD Jul 11 00:27:16.307000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4103 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635626135316531633435616334653463376135396136326366613134 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.308000 audit: BPF prog-id=188 op=LOAD Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4049 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633937306633376439326265623531336137343262393233343633 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4049 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633937306633376439326265623531336137343262393233343633 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit: BPF prog-id=189 op=LOAD Jul 11 00:27:16.309000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4049 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633937306633376439326265623531336137343262393233343633 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit: BPF prog-id=190 op=LOAD Jul 11 00:27:16.309000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4049 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633937306633376439326265623531336137343262393233343633 Jul 11 00:27:16.309000 audit: BPF prog-id=190 op=UNLOAD Jul 11 00:27:16.309000 audit: BPF prog-id=189 op=UNLOAD Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.309000 audit: BPF prog-id=191 op=LOAD Jul 11 00:27:16.309000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4049 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633937306633376439326265623531336137343262393233343633 Jul 11 00:27:16.312567 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:16.337027 systemd-networkd[1050]: calid2003879460: Link UP Jul 11 00:27:16.338552 env[1213]: time="2025-07-11T00:27:16.337956594Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-lbsrl,Uid:22590bf7-c35e-4aef-831c-d97c50f394c2,Namespace:calico-system,Attempt:1,} returns sandbox id \"65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df\"" Jul 11 00:27:16.338498 systemd-networkd[1050]: calid2003879460: Gained carrier Jul 11 00:27:16.339336 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid2003879460: link becomes ready Jul 11 00:27:16.342593 env[1213]: time="2025-07-11T00:27:16.342527866Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 11 00:27:16.342994 env[1213]: time="2025-07-11T00:27:16.342594787Z" level=info msg="StartContainer for \"52c970f37d92beb513a742b923463da96d61c57eb7f301f60dabdaae7610b4c6\" returns successfully" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.013 [INFO][3909] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--m97fq-eth0 coredns-668d6bf9bc- kube-system d13d205f-ef30-472a-ac7f-86f872056c53 967 0 2025-07-11 00:26:43 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-m97fq eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid2003879460 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.013 [INFO][3909] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.106 [INFO][3967] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" HandleID="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.116 [INFO][3967] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" HandleID="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400041db60), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-m97fq", "timestamp":"2025-07-11 00:27:16.10601281 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.116 [INFO][3967] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.209 [INFO][3967] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.209 [INFO][3967] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.273 [INFO][3967] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.292 [INFO][3967] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.298 [INFO][3967] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.302 [INFO][3967] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.306 [INFO][3967] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.306 [INFO][3967] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.312 [INFO][3967] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8 Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.317 [INFO][3967] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.323 [INFO][3967] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.323 [INFO][3967] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" host="localhost" Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.323 [INFO][3967] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.357197 env[1213]: 2025-07-11 00:27:16.323 [INFO][3967] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" HandleID="k8s-pod-network.49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.357886 env[1213]: 2025-07-11 00:27:16.326 [INFO][3909] cni-plugin/k8s.go 418: Populated endpoint ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--m97fq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"d13d205f-ef30-472a-ac7f-86f872056c53", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-m97fq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid2003879460", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.357886 env[1213]: 2025-07-11 00:27:16.326 [INFO][3909] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.357886 env[1213]: 2025-07-11 00:27:16.326 [INFO][3909] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid2003879460 ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.357886 env[1213]: 2025-07-11 00:27:16.340 [INFO][3909] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.357886 env[1213]: 2025-07-11 00:27:16.342 [INFO][3909] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--m97fq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"d13d205f-ef30-472a-ac7f-86f872056c53", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8", Pod:"coredns-668d6bf9bc-m97fq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid2003879460", MAC:"72:73:0d:56:fa:31", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.357886 env[1213]: 2025-07-11 00:27:16.352 [INFO][3909] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8" Namespace="kube-system" Pod="coredns-668d6bf9bc-m97fq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:16.369000 audit[4190]: NETFILTER_CFG table=filter:110 family=2 entries=40 op=nft_register_chain pid=4190 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:16.369000 audit[4190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20344 a0=3 a1=fffff0935740 a2=0 a3=ffffb894afa8 items=0 ppid=3341 pid=4190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.369000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:16.372354 env[1213]: time="2025-07-11T00:27:16.372086893Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:16.372354 env[1213]: time="2025-07-11T00:27:16.372337697Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:16.372477 env[1213]: time="2025-07-11T00:27:16.372351737Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:16.372752 env[1213]: time="2025-07-11T00:27:16.372598181Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8 pid=4188 runtime=io.containerd.runc.v2 Jul 11 00:27:16.386908 systemd[1]: Started cri-containerd-49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8.scope. Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit: BPF prog-id=192 op=LOAD Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4188 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613234346563366364616533346531336637626134363735643730 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4188 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613234346563366364616533346531336637626134363735643730 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit: BPF prog-id=193 op=LOAD Jul 11 00:27:16.415000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4188 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613234346563366364616533346531336637626134363735643730 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit: BPF prog-id=194 op=LOAD Jul 11 00:27:16.415000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4188 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613234346563366364616533346531336637626134363735643730 Jul 11 00:27:16.415000 audit: BPF prog-id=194 op=UNLOAD Jul 11 00:27:16.415000 audit: BPF prog-id=193 op=UNLOAD Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.415000 audit: BPF prog-id=195 op=LOAD Jul 11 00:27:16.415000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4188 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613234346563366364616533346531336637626134363735643730 Jul 11 00:27:16.419299 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:16.429000 audit[4148]: AVC avc: denied { getattr } for pid=4148 comm="coredns" path="cgroup:[4026532213]" dev="nsfs" ino=4026532213 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c572 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:27:16.429000 audit[4148]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400015cb88 a2=400015e578 a3=0 items=0 ppid=4049 pid=4148 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c572 key=(null) Jul 11 00:27:16.429000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:27:16.442621 systemd-networkd[1050]: cali2b46797827c: Link UP Jul 11 00:27:16.444237 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2b46797827c: link becomes ready Jul 11 00:27:16.448292 systemd-networkd[1050]: cali2b46797827c: Gained carrier Jul 11 00:27:16.455044 env[1213]: time="2025-07-11T00:27:16.454615357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-m97fq,Uid:d13d205f-ef30-472a-ac7f-86f872056c53,Namespace:kube-system,Attempt:1,} returns sandbox id \"49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8\"" Jul 11 00:27:16.456181 kubelet[1941]: E0711 00:27:16.455663 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:16.459445 env[1213]: time="2025-07-11T00:27:16.459378792Z" level=info msg="CreateContainer within sandbox \"49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.043 [INFO][3921] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0 calico-apiserver-7cb6fc77df- calico-apiserver 311c407f-000e-45a9-abaa-20e369f1001f 968 0 2025-07-11 00:26:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7cb6fc77df projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7cb6fc77df-ts4sp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2b46797827c [] [] }} ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.043 [INFO][3921] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.141 [INFO][4002] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" HandleID="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.141 [INFO][4002] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" HandleID="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000405680), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7cb6fc77df-ts4sp", "timestamp":"2025-07-11 00:27:16.141677534 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.141 [INFO][4002] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.323 [INFO][4002] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.323 [INFO][4002] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.373 [INFO][4002] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.393 [INFO][4002] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.404 [INFO][4002] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.408 [INFO][4002] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.410 [INFO][4002] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.411 [INFO][4002] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.413 [INFO][4002] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.419 [INFO][4002] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.428 [INFO][4002] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.428 [INFO][4002] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" host="localhost" Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.428 [INFO][4002] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.478833 env[1213]: 2025-07-11 00:27:16.428 [INFO][4002] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" HandleID="k8s-pod-network.fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.479424 env[1213]: 2025-07-11 00:27:16.437 [INFO][3921] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"311c407f-000e-45a9-abaa-20e369f1001f", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7cb6fc77df-ts4sp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2b46797827c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.479424 env[1213]: 2025-07-11 00:27:16.437 [INFO][3921] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.479424 env[1213]: 2025-07-11 00:27:16.437 [INFO][3921] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2b46797827c ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.479424 env[1213]: 2025-07-11 00:27:16.444 [INFO][3921] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.479424 env[1213]: 2025-07-11 00:27:16.446 [INFO][3921] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"311c407f-000e-45a9-abaa-20e369f1001f", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b", Pod:"calico-apiserver-7cb6fc77df-ts4sp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2b46797827c", MAC:"02:f1:13:49:12:4a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.479424 env[1213]: 2025-07-11 00:27:16.472 [INFO][3921] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-ts4sp" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:16.498348 env[1213]: time="2025-07-11T00:27:16.498296847Z" level=info msg="CreateContainer within sandbox \"49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"cdfeb2100bbfc58df215c3ef91df81457fd69ebd541458d8f1694a41b2a9a46b\"" Jul 11 00:27:16.499162 env[1213]: time="2025-07-11T00:27:16.499132340Z" level=info msg="StartContainer for \"cdfeb2100bbfc58df215c3ef91df81457fd69ebd541458d8f1694a41b2a9a46b\"" Jul 11 00:27:16.502610 env[1213]: time="2025-07-11T00:27:16.502528634Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:16.502610 env[1213]: time="2025-07-11T00:27:16.502570914Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:16.502610 env[1213]: time="2025-07-11T00:27:16.502581395Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:16.501000 audit[4239]: NETFILTER_CFG table=filter:111 family=2 entries=68 op=nft_register_chain pid=4239 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:16.503266 env[1213]: time="2025-07-11T00:27:16.503213045Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b pid=4242 runtime=io.containerd.runc.v2 Jul 11 00:27:16.501000 audit[4239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=34624 a0=3 a1=fffffc25fba0 a2=0 a3=ffffaef66fa8 items=0 ppid=3341 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.501000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:16.531756 systemd[1]: Started cri-containerd-fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b.scope. Jul 11 00:27:16.539355 systemd-networkd[1050]: cali0298d8fc8e8: Link UP Jul 11 00:27:16.540842 systemd-networkd[1050]: cali0298d8fc8e8: Gained carrier Jul 11 00:27:16.541274 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0298d8fc8e8: link becomes ready Jul 11 00:27:16.545560 systemd[1]: Started cri-containerd-cdfeb2100bbfc58df215c3ef91df81457fd69ebd541458d8f1694a41b2a9a46b.scope. Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.556000 audit: BPF prog-id=196 op=LOAD Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4242 pid=4259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396362623163623636646539396534323862363237633431363335 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4242 pid=4259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396362623163623636646539396534323862363237633431363335 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.557000 audit: BPF prog-id=197 op=LOAD Jul 11 00:27:16.557000 audit[4259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4242 pid=4259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396362623163623636646539396534323862363237633431363335 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit: BPF prog-id=198 op=LOAD Jul 11 00:27:16.559000 audit[4259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4242 pid=4259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396362623163623636646539396534323862363237633431363335 Jul 11 00:27:16.559000 audit: BPF prog-id=198 op=UNLOAD Jul 11 00:27:16.559000 audit: BPF prog-id=197 op=UNLOAD Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { perfmon } for pid=4259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit[4259]: AVC avc: denied { bpf } for pid=4259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.559000 audit: BPF prog-id=199 op=LOAD Jul 11 00:27:16.559000 audit[4259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4242 pid=4259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396362623163623636646539396534323862363237633431363335 Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.068 [INFO][3941] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0 calico-kube-controllers-7cbb9bcc9f- calico-system 8dd2b46e-3124-43b5-a369-e2370d59a903 972 0 2025-07-11 00:26:55 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7cbb9bcc9f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7cbb9bcc9f-ff556 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali0298d8fc8e8 [] [] }} ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.069 [INFO][3941] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.146 [INFO][4005] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" HandleID="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.150 [INFO][4005] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" HandleID="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400010f6f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7cbb9bcc9f-ff556", "timestamp":"2025-07-11 00:27:16.146793615 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.150 [INFO][4005] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.428 [INFO][4005] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.428 [INFO][4005] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.474 [INFO][4005] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.493 [INFO][4005] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.503 [INFO][4005] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.506 [INFO][4005] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.513 [INFO][4005] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.513 [INFO][4005] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.515 [INFO][4005] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6 Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.520 [INFO][4005] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.531 [INFO][4005] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.531 [INFO][4005] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" host="localhost" Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.531 [INFO][4005] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.566355 env[1213]: 2025-07-11 00:27:16.531 [INFO][4005] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" HandleID="k8s-pod-network.815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.567084 env[1213]: 2025-07-11 00:27:16.537 [INFO][3941] cni-plugin/k8s.go 418: Populated endpoint ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0", GenerateName:"calico-kube-controllers-7cbb9bcc9f-", Namespace:"calico-system", SelfLink:"", UID:"8dd2b46e-3124-43b5-a369-e2370d59a903", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7cbb9bcc9f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7cbb9bcc9f-ff556", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0298d8fc8e8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.567084 env[1213]: 2025-07-11 00:27:16.537 [INFO][3941] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.567084 env[1213]: 2025-07-11 00:27:16.537 [INFO][3941] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0298d8fc8e8 ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.567084 env[1213]: 2025-07-11 00:27:16.541 [INFO][3941] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.567084 env[1213]: 2025-07-11 00:27:16.545 [INFO][3941] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0", GenerateName:"calico-kube-controllers-7cbb9bcc9f-", Namespace:"calico-system", SelfLink:"", UID:"8dd2b46e-3124-43b5-a369-e2370d59a903", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7cbb9bcc9f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6", Pod:"calico-kube-controllers-7cbb9bcc9f-ff556", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0298d8fc8e8", MAC:"0e:7f:e3:4f:7e:ae", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.567084 env[1213]: 2025-07-11 00:27:16.562 [INFO][3941] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6" Namespace="calico-system" Pod="calico-kube-controllers-7cbb9bcc9f-ff556" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:16.567447 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:16.580000 audit[4308]: NETFILTER_CFG table=filter:112 family=2 entries=48 op=nft_register_chain pid=4308 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit: BPF prog-id=200 op=LOAD Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4188 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364666562323130306262666335386466323135633365663931646638 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4188 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364666562323130306262666335386466323135633365663931646638 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit: BPF prog-id=201 op=LOAD Jul 11 00:27:16.581000 audit[4270]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4188 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364666562323130306262666335386466323135633365663931646638 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit: BPF prog-id=202 op=LOAD Jul 11 00:27:16.581000 audit[4270]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4188 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364666562323130306262666335386466323135633365663931646638 Jul 11 00:27:16.581000 audit: BPF prog-id=202 op=UNLOAD Jul 11 00:27:16.581000 audit: BPF prog-id=201 op=UNLOAD Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.580000 audit[4308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23124 a0=3 a1=ffffeaa97a10 a2=0 a3=ffffa01a4fa8 items=0 ppid=3341 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.580000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:16.581000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.581000 audit: BPF prog-id=203 op=LOAD Jul 11 00:27:16.581000 audit[4270]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4188 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364666562323130306262666335386466323135633365663931646638 Jul 11 00:27:16.590704 env[1213]: time="2025-07-11T00:27:16.590307340Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:16.590704 env[1213]: time="2025-07-11T00:27:16.590379782Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:16.590704 env[1213]: time="2025-07-11T00:27:16.590394662Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:16.591109 env[1213]: time="2025-07-11T00:27:16.591020472Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6 pid=4315 runtime=io.containerd.runc.v2 Jul 11 00:27:16.604651 env[1213]: time="2025-07-11T00:27:16.604603686Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-ts4sp,Uid:311c407f-000e-45a9-abaa-20e369f1001f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b\"" Jul 11 00:27:16.609472 env[1213]: time="2025-07-11T00:27:16.609435043Z" level=info msg="StartContainer for \"cdfeb2100bbfc58df215c3ef91df81457fd69ebd541458d8f1694a41b2a9a46b\" returns successfully" Jul 11 00:27:16.614000 audit[4291]: AVC avc: denied { getattr } for pid=4291 comm="coredns" path="cgroup:[4026532230]" dev="nsfs" ino=4026532230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c432,c617 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:27:16.614000 audit[4291]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400021e978 a2=4000206578 a3=0 items=0 ppid=4188 pid=4291 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c432,c617 key=(null) Jul 11 00:27:16.614000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:27:16.617381 systemd[1]: Started cri-containerd-815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6.scope. Jul 11 00:27:16.642238 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5d6dee90049: link becomes ready Jul 11 00:27:16.642931 systemd-networkd[1050]: cali5d6dee90049: Link UP Jul 11 00:27:16.643094 systemd-networkd[1050]: cali5d6dee90049: Gained carrier Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.074 [INFO][3969] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0 calico-apiserver-7cb6fc77df- calico-apiserver a2f06025-1162-4925-a86c-399f3bdfe4ae 970 0 2025-07-11 00:26:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7cb6fc77df projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7cb6fc77df-5xrz7 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5d6dee90049 [] [] }} ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.074 [INFO][3969] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.151 [INFO][4016] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" HandleID="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.151 [INFO][4016] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" HandleID="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400041bb60), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7cb6fc77df-5xrz7", "timestamp":"2025-07-11 00:27:16.151538129 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.151 [INFO][4016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.532 [INFO][4016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.532 [INFO][4016] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.579 [INFO][4016] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.591 [INFO][4016] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.601 [INFO][4016] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.604 [INFO][4016] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.608 [INFO][4016] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.608 [INFO][4016] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.610 [INFO][4016] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.622 [INFO][4016] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.633 [INFO][4016] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.633 [INFO][4016] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" host="localhost" Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.633 [INFO][4016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.663177 env[1213]: 2025-07-11 00:27:16.633 [INFO][4016] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" HandleID="k8s-pod-network.1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.663736 env[1213]: 2025-07-11 00:27:16.638 [INFO][3969] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a2f06025-1162-4925-a86c-399f3bdfe4ae", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7cb6fc77df-5xrz7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d6dee90049", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.663736 env[1213]: 2025-07-11 00:27:16.638 [INFO][3969] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.663736 env[1213]: 2025-07-11 00:27:16.638 [INFO][3969] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5d6dee90049 ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.663736 env[1213]: 2025-07-11 00:27:16.641 [INFO][3969] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.663736 env[1213]: 2025-07-11 00:27:16.642 [INFO][3969] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a2f06025-1162-4925-a86c-399f3bdfe4ae", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e", Pod:"calico-apiserver-7cb6fc77df-5xrz7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d6dee90049", MAC:"b6:89:32:fa:a6:ac", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:16.663736 env[1213]: 2025-07-11 00:27:16.658 [INFO][3969] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e" Namespace="calico-apiserver" Pod="calico-apiserver-7cb6fc77df-5xrz7" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit: BPF prog-id=204 op=LOAD Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4315 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831353832326434623766386330306232613138326239336231393165 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4315 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831353832326434623766386330306232613138326239336231393165 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit: BPF prog-id=205 op=LOAD Jul 11 00:27:16.666000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4315 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831353832326434623766386330306232613138326239336231393165 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.666000 audit: BPF prog-id=206 op=LOAD Jul 11 00:27:16.666000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4315 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831353832326434623766386330306232613138326239336231393165 Jul 11 00:27:16.666000 audit: BPF prog-id=206 op=UNLOAD Jul 11 00:27:16.666000 audit: BPF prog-id=205 op=UNLOAD Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { perfmon } for pid=4331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit[4331]: AVC avc: denied { bpf } for pid=4331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.667000 audit: BPF prog-id=207 op=LOAD Jul 11 00:27:16.667000 audit[4331]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4315 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831353832326434623766386330306232613138326239336231393165 Jul 11 00:27:16.670057 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:16.681000 audit[4369]: NETFILTER_CFG table=filter:113 family=2 entries=53 op=nft_register_chain pid=4369 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:16.681000 audit[4369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26624 a0=3 a1=ffffcd9cca30 a2=0 a3=ffffbef50fa8 items=0 ppid=3341 pid=4369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.681000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:16.698959 env[1213]: time="2025-07-11T00:27:16.698788614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7cbb9bcc9f-ff556,Uid:8dd2b46e-3124-43b5-a369-e2370d59a903,Namespace:calico-system,Attempt:1,} returns sandbox id \"815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6\"" Jul 11 00:27:16.699893 env[1213]: time="2025-07-11T00:27:16.699543666Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:16.699893 env[1213]: time="2025-07-11T00:27:16.699598787Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:16.699893 env[1213]: time="2025-07-11T00:27:16.699609667Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:16.700779 env[1213]: time="2025-07-11T00:27:16.700708004Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e pid=4385 runtime=io.containerd.runc.v2 Jul 11 00:27:16.713417 env[1213]: time="2025-07-11T00:27:16.713353004Z" level=info msg="StopPodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\"" Jul 11 00:27:16.715339 systemd[1]: Started cri-containerd-1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e.scope. Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.732000 audit: BPF prog-id=208 op=LOAD Jul 11 00:27:16.733000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.733000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4385 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656137303337333239313833643161306361623430653664303436 Jul 11 00:27:16.734000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.734000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4385 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656137303337333239313833643161306361623430653664303436 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.736000 audit: BPF prog-id=209 op=LOAD Jul 11 00:27:16.736000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4385 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656137303337333239313833643161306361623430653664303436 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.737000 audit: BPF prog-id=210 op=LOAD Jul 11 00:27:16.737000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4385 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656137303337333239313833643161306361623430653664303436 Jul 11 00:27:16.738000 audit: BPF prog-id=210 op=UNLOAD Jul 11 00:27:16.738000 audit: BPF prog-id=209 op=UNLOAD Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:16.738000 audit: BPF prog-id=211 op=LOAD Jul 11 00:27:16.738000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4385 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656137303337333239313833643161306361623430653664303436 Jul 11 00:27:16.742745 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:16.779107 env[1213]: time="2025-07-11T00:27:16.779052002Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cb6fc77df-5xrz7,Uid:a2f06025-1162-4925-a86c-399f3bdfe4ae,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e\"" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.798 [INFO][4417] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.798 [INFO][4417] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" iface="eth0" netns="/var/run/netns/cni-928cce3a-513d-1530-e2fd-62667a27060d" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.798 [INFO][4417] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" iface="eth0" netns="/var/run/netns/cni-928cce3a-513d-1530-e2fd-62667a27060d" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.798 [INFO][4417] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" iface="eth0" netns="/var/run/netns/cni-928cce3a-513d-1530-e2fd-62667a27060d" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.798 [INFO][4417] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.798 [INFO][4417] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.830 [INFO][4438] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.830 [INFO][4438] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.830 [INFO][4438] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.843 [WARNING][4438] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.843 [INFO][4438] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.847 [INFO][4438] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:16.857053 env[1213]: 2025-07-11 00:27:16.852 [INFO][4417] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:16.857497 env[1213]: time="2025-07-11T00:27:16.857188276Z" level=info msg="TearDown network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" successfully" Jul 11 00:27:16.857497 env[1213]: time="2025-07-11T00:27:16.857243317Z" level=info msg="StopPodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" returns successfully" Jul 11 00:27:16.858467 env[1213]: time="2025-07-11T00:27:16.858427616Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nlm65,Uid:d23addcf-0d96-4e31-8fa7-1460f1e178d3,Namespace:calico-system,Attempt:1,}" Jul 11 00:27:16.880548 kubelet[1941]: E0711 00:27:16.880518 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:16.900142 systemd[1]: run-netns-cni\x2d928cce3a\x2d513d\x2d1530\x2de2fd\x2d62667a27060d.mount: Deactivated successfully. Jul 11 00:27:16.900962 systemd[1]: run-netns-cni\x2d1b6b04cf\x2d7df1\x2d3db1\x2d1be6\x2d6298c95781dc.mount: Deactivated successfully. Jul 11 00:27:16.902356 kubelet[1941]: E0711 00:27:16.901432 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:16.901014 systemd[1]: run-netns-cni\x2d524d191d\x2d9eb5\x2de371\x2d803e\x2df1a58da9ed60.mount: Deactivated successfully. Jul 11 00:27:16.901059 systemd[1]: run-netns-cni\x2d75ef73ba\x2d1b37\x2d7dcc\x2d87e2\x2d730fc6900066.mount: Deactivated successfully. Jul 11 00:27:16.913041 kubelet[1941]: I0711 00:27:16.912972 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-xzph5" podStartSLOduration=33.912954357 podStartE2EDuration="33.912954357s" podCreationTimestamp="2025-07-11 00:26:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:27:16.897486273 +0000 UTC m=+40.281878960" watchObservedRunningTime="2025-07-11 00:27:16.912954357 +0000 UTC m=+40.297347084" Jul 11 00:27:16.929000 audit[4462]: NETFILTER_CFG table=filter:114 family=2 entries=18 op=nft_register_rule pid=4462 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:16.929000 audit[4462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffed37da60 a2=0 a3=1 items=0 ppid=2050 pid=4462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.929000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:16.933000 audit[4462]: NETFILTER_CFG table=nat:115 family=2 entries=16 op=nft_register_rule pid=4462 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:16.933000 audit[4462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffed37da60 a2=0 a3=1 items=0 ppid=2050 pid=4462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.933000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:16.939724 kubelet[1941]: I0711 00:27:16.939542 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-m97fq" podStartSLOduration=33.939525297 podStartE2EDuration="33.939525297s" podCreationTimestamp="2025-07-11 00:26:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:27:16.939002008 +0000 UTC m=+40.323394735" watchObservedRunningTime="2025-07-11 00:27:16.939525297 +0000 UTC m=+40.323918024" Jul 11 00:27:16.954000 audit[4472]: NETFILTER_CFG table=filter:116 family=2 entries=15 op=nft_register_rule pid=4472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:16.954000 audit[4472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff6e68ba0 a2=0 a3=1 items=0 ppid=2050 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.954000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:16.965000 audit[4472]: NETFILTER_CFG table=nat:117 family=2 entries=49 op=nft_register_chain pid=4472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:16.965000 audit[4472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffff6e68ba0 a2=0 a3=1 items=0 ppid=2050 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:16.965000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:17.009007 systemd-networkd[1050]: cali1fc737a8f7b: Link UP Jul 11 00:27:17.009621 systemd-networkd[1050]: cali1fc737a8f7b: Gained carrier Jul 11 00:27:17.010244 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1fc737a8f7b: link becomes ready Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.935 [INFO][4449] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--nlm65-eth0 csi-node-driver- calico-system d23addcf-0d96-4e31-8fa7-1460f1e178d3 1014 0 2025-07-11 00:26:55 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-nlm65 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali1fc737a8f7b [] [] }} ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.935 [INFO][4449] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.962 [INFO][4465] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" HandleID="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.963 [INFO][4465] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" HandleID="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001b0e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-nlm65", "timestamp":"2025-07-11 00:27:16.962933186 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.963 [INFO][4465] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.963 [INFO][4465] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.963 [INFO][4465] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.972 [INFO][4465] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.976 [INFO][4465] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.983 [INFO][4465] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.985 [INFO][4465] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.988 [INFO][4465] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.988 [INFO][4465] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.991 [INFO][4465] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:16.995 [INFO][4465] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:17.005 [INFO][4465] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:17.005 [INFO][4465] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" host="localhost" Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:17.005 [INFO][4465] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:17.024539 env[1213]: 2025-07-11 00:27:17.005 [INFO][4465] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" HandleID="k8s-pod-network.2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.025082 env[1213]: 2025-07-11 00:27:17.007 [INFO][4449] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nlm65-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d23addcf-0d96-4e31-8fa7-1460f1e178d3", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-nlm65", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fc737a8f7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:17.025082 env[1213]: 2025-07-11 00:27:17.007 [INFO][4449] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.025082 env[1213]: 2025-07-11 00:27:17.007 [INFO][4449] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1fc737a8f7b ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.025082 env[1213]: 2025-07-11 00:27:17.010 [INFO][4449] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.025082 env[1213]: 2025-07-11 00:27:17.010 [INFO][4449] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nlm65-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d23addcf-0d96-4e31-8fa7-1460f1e178d3", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef", Pod:"csi-node-driver-nlm65", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fc737a8f7b", MAC:"e2:df:74:96:6b:f6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:17.025082 env[1213]: 2025-07-11 00:27:17.021 [INFO][4449] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef" Namespace="calico-system" Pod="csi-node-driver-nlm65" WorkloadEndpoint="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:17.037496 env[1213]: time="2025-07-11T00:27:17.037430148Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:27:17.037496 env[1213]: time="2025-07-11T00:27:17.037468308Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:27:17.037496 env[1213]: time="2025-07-11T00:27:17.037478588Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:27:17.036000 audit[4491]: NETFILTER_CFG table=filter:118 family=2 entries=62 op=nft_register_chain pid=4491 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:27:17.036000 audit[4491]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28352 a0=3 a1=fffffdb0b570 a2=0 a3=ffff99de8fa8 items=0 ppid=3341 pid=4491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:17.036000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:27:17.038063 env[1213]: time="2025-07-11T00:27:17.037601710Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef pid=4492 runtime=io.containerd.runc.v2 Jul 11 00:27:17.051158 systemd[1]: Started cri-containerd-2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef.scope. Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.064000 audit: BPF prog-id=212 op=LOAD Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4492 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:17.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353730343762303666366565626363613333313666666333633532 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4492 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:17.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353730343762303666366565626363613333313666666333633532 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.065000 audit: BPF prog-id=213 op=LOAD Jul 11 00:27:17.065000 audit[4504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4492 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:17.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353730343762303666366565626363613333313666666333633532 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.066000 audit: BPF prog-id=214 op=LOAD Jul 11 00:27:17.066000 audit[4504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4492 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:17.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353730343762303666366565626363613333313666666333633532 Jul 11 00:27:17.067000 audit: BPF prog-id=214 op=UNLOAD Jul 11 00:27:17.067000 audit: BPF prog-id=213 op=UNLOAD Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:17.067000 audit: BPF prog-id=215 op=LOAD Jul 11 00:27:17.067000 audit[4504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4492 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:17.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353730343762303666366565626363613333313666666333633532 Jul 11 00:27:17.069672 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:27:17.080398 env[1213]: time="2025-07-11T00:27:17.080351407Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nlm65,Uid:d23addcf-0d96-4e31-8fa7-1460f1e178d3,Namespace:calico-system,Attempt:1,} returns sandbox id \"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef\"" Jul 11 00:27:17.284777 systemd-networkd[1050]: cali2f102e2f93a: Gained IPv6LL Jul 11 00:27:17.348397 systemd-networkd[1050]: calid2003879460: Gained IPv6LL Jul 11 00:27:17.797426 systemd-networkd[1050]: cali2b46797827c: Gained IPv6LL Jul 11 00:27:17.804594 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount797511664.mount: Deactivated successfully. Jul 11 00:27:17.860324 systemd-networkd[1050]: caliadf02203129: Gained IPv6LL Jul 11 00:27:17.933073 kubelet[1941]: E0711 00:27:17.932855 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:17.933073 kubelet[1941]: E0711 00:27:17.932988 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:18.052427 systemd-networkd[1050]: cali0298d8fc8e8: Gained IPv6LL Jul 11 00:27:18.052958 systemd-networkd[1050]: cali5d6dee90049: Gained IPv6LL Jul 11 00:27:18.505451 env[1213]: time="2025-07-11T00:27:18.505398174Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:18.508628 env[1213]: time="2025-07-11T00:27:18.508593702Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:18.516092 env[1213]: time="2025-07-11T00:27:18.516059054Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:18.518345 env[1213]: time="2025-07-11T00:27:18.518315287Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:18.519366 env[1213]: time="2025-07-11T00:27:18.519257142Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 11 00:27:18.521217 env[1213]: time="2025-07-11T00:27:18.521161730Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 11 00:27:18.522157 env[1213]: time="2025-07-11T00:27:18.522129664Z" level=info msg="CreateContainer within sandbox \"65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 11 00:27:18.535280 env[1213]: time="2025-07-11T00:27:18.535241181Z" level=info msg="CreateContainer within sandbox \"65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"b578feefec705e667e72aacd580a4e8d955b969be89c5e458282b34a440c5a81\"" Jul 11 00:27:18.535883 env[1213]: time="2025-07-11T00:27:18.535856070Z" level=info msg="StartContainer for \"b578feefec705e667e72aacd580a4e8d955b969be89c5e458282b34a440c5a81\"" Jul 11 00:27:18.560703 systemd[1]: run-containerd-runc-k8s.io-b578feefec705e667e72aacd580a4e8d955b969be89c5e458282b34a440c5a81-runc.Y4HCGB.mount: Deactivated successfully. Jul 11 00:27:18.562579 systemd[1]: Started cri-containerd-b578feefec705e667e72aacd580a4e8d955b969be89c5e458282b34a440c5a81.scope. Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.592000 audit: BPF prog-id=216 op=LOAD Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4103 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235373866656566656337303565363637653732616163643538306134 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4103 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235373866656566656337303565363637653732616163643538306134 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.594000 audit: BPF prog-id=217 op=LOAD Jul 11 00:27:18.594000 audit[4534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4103 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235373866656566656337303565363637653732616163643538306134 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.595000 audit: BPF prog-id=218 op=LOAD Jul 11 00:27:18.595000 audit[4534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4103 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235373866656566656337303565363637653732616163643538306134 Jul 11 00:27:18.596000 audit: BPF prog-id=218 op=UNLOAD Jul 11 00:27:18.596000 audit: BPF prog-id=217 op=UNLOAD Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { perfmon } for pid=4534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit[4534]: AVC avc: denied { bpf } for pid=4534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:18.596000 audit: BPF prog-id=219 op=LOAD Jul 11 00:27:18.596000 audit[4534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4103 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235373866656566656337303565363637653732616163643538306134 Jul 11 00:27:18.616124 env[1213]: time="2025-07-11T00:27:18.616045509Z" level=info msg="StartContainer for \"b578feefec705e667e72aacd580a4e8d955b969be89c5e458282b34a440c5a81\" returns successfully" Jul 11 00:27:18.820413 systemd-networkd[1050]: cali1fc737a8f7b: Gained IPv6LL Jul 11 00:27:18.936391 kubelet[1941]: E0711 00:27:18.936355 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:18.936808 kubelet[1941]: E0711 00:27:18.936787 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:18.949231 kubelet[1941]: I0711 00:27:18.949086 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-lbsrl" podStartSLOduration=21.770229103 podStartE2EDuration="23.94907093s" podCreationTimestamp="2025-07-11 00:26:55 +0000 UTC" firstStartedPulling="2025-07-11 00:27:16.341869936 +0000 UTC m=+39.726262663" lastFinishedPulling="2025-07-11 00:27:18.520711763 +0000 UTC m=+41.905104490" observedRunningTime="2025-07-11 00:27:18.948246117 +0000 UTC m=+42.332638844" watchObservedRunningTime="2025-07-11 00:27:18.94907093 +0000 UTC m=+42.333463657" Jul 11 00:27:18.975897 kernel: kauditd_printk_skb: 616 callbacks suppressed Jul 11 00:27:18.976115 kernel: audit: type=1325 audit(1752193638.968:1408): table=filter:119 family=2 entries=12 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:18.976151 kernel: audit: type=1300 audit(1752193638.968:1408): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffc3ed7b0 a2=0 a3=1 items=0 ppid=2050 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.976172 kernel: audit: type=1327 audit(1752193638.968:1408): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:18.968000 audit[4583]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:18.968000 audit[4583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffc3ed7b0 a2=0 a3=1 items=0 ppid=2050 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:18.986216 kernel: audit: type=1325 audit(1752193638.980:1409): table=nat:120 family=2 entries=22 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:18.986332 kernel: audit: type=1300 audit(1752193638.980:1409): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffffc3ed7b0 a2=0 a3=1 items=0 ppid=2050 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.980000 audit[4583]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:18.980000 audit[4583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffffc3ed7b0 a2=0 a3=1 items=0 ppid=2050 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:18.980000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:18.988002 kernel: audit: type=1327 audit(1752193638.980:1409): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:20.455605 env[1213]: time="2025-07-11T00:27:20.455552344Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:20.468531 env[1213]: time="2025-07-11T00:27:20.468478088Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:20.470223 env[1213]: time="2025-07-11T00:27:20.470176472Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:20.472127 env[1213]: time="2025-07-11T00:27:20.472091179Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 11 00:27:20.473687 env[1213]: time="2025-07-11T00:27:20.473218155Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:20.474058 env[1213]: time="2025-07-11T00:27:20.474033607Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 11 00:27:20.479429 env[1213]: time="2025-07-11T00:27:20.479386923Z" level=info msg="CreateContainer within sandbox \"fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:27:20.493863 systemd[1]: Started sshd@8-10.0.0.54:22-10.0.0.1:59172.service. Jul 11 00:27:20.497486 kernel: audit: type=1130 audit(1752193640.492:1410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.54:22-10.0.0.1:59172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:20.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.54:22-10.0.0.1:59172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:20.517549 env[1213]: time="2025-07-11T00:27:20.517501105Z" level=info msg="CreateContainer within sandbox \"fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"352e2dbad0300e45ce260e6ab7c58900738dca9cf5ef0bcceb4ca0ff1da1c022\"" Jul 11 00:27:20.518279 env[1213]: time="2025-07-11T00:27:20.518247075Z" level=info msg="StartContainer for \"352e2dbad0300e45ce260e6ab7c58900738dca9cf5ef0bcceb4ca0ff1da1c022\"" Jul 11 00:27:20.544361 systemd[1]: Started cri-containerd-352e2dbad0300e45ce260e6ab7c58900738dca9cf5ef0bcceb4ca0ff1da1c022.scope. Jul 11 00:27:20.552000 audit[4613]: USER_ACCT pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.556053 sshd[4613]: Accepted publickey for core from 10.0.0.1 port 59172 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:20.557310 kernel: audit: type=1101 audit(1752193640.552:1411): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.557388 kernel: audit: type=1103 audit(1752193640.556:1412): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.556000 audit[4613]: CRED_ACQ pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.559890 sshd[4613]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:20.561117 kernel: audit: type=1006 audit(1752193640.556:1413): pid=4613 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 11 00:27:20.556000 audit[4613]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeaabfc50 a2=3 a3=1 items=0 ppid=1 pid=4613 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.556000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:20.564756 systemd-logind[1202]: New session 9 of user core. Jul 11 00:27:20.568943 systemd[1]: Started session-9.scope. Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.572000 audit: BPF prog-id=220 op=LOAD Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4242 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335326532646261643033303065343563653236306536616237633538 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4242 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335326532646261643033303065343563653236306536616237633538 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.573000 audit: BPF prog-id=221 op=LOAD Jul 11 00:27:20.573000 audit[4622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4242 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335326532646261643033303065343563653236306536616237633538 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit: BPF prog-id=222 op=LOAD Jul 11 00:27:20.574000 audit[4622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4242 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335326532646261643033303065343563653236306536616237633538 Jul 11 00:27:20.574000 audit: BPF prog-id=222 op=UNLOAD Jul 11 00:27:20.574000 audit: BPF prog-id=221 op=UNLOAD Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { perfmon } for pid=4622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit[4622]: AVC avc: denied { bpf } for pid=4622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:20.574000 audit: BPF prog-id=223 op=LOAD Jul 11 00:27:20.574000 audit[4622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4242 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335326532646261643033303065343563653236306536616237633538 Jul 11 00:27:20.574000 audit[4613]: USER_START pid=4613 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.576000 audit[4638]: CRED_ACQ pid=4638 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.610236 env[1213]: time="2025-07-11T00:27:20.609922019Z" level=info msg="StartContainer for \"352e2dbad0300e45ce260e6ab7c58900738dca9cf5ef0bcceb4ca0ff1da1c022\" returns successfully" Jul 11 00:27:20.871318 sshd[4613]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:20.870000 audit[4613]: USER_END pid=4613 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.871000 audit[4613]: CRED_DISP pid=4613 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:20.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.54:22-10.0.0.1:59172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:20.873983 systemd[1]: sshd@8-10.0.0.54:22-10.0.0.1:59172.service: Deactivated successfully. Jul 11 00:27:20.874780 systemd[1]: session-9.scope: Deactivated successfully. Jul 11 00:27:20.875672 systemd-logind[1202]: Session 9 logged out. Waiting for processes to exit. Jul 11 00:27:20.876500 systemd-logind[1202]: Removed session 9. Jul 11 00:27:20.970000 audit[4682]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=4682 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:20.970000 audit[4682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffeada75c0 a2=0 a3=1 items=0 ppid=2050 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.970000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:20.977000 audit[4682]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=4682 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:20.977000 audit[4682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffeada75c0 a2=0 a3=1 items=0 ppid=2050 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:20.977000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:21.678000 audit[4632]: AVC avc: denied { watch } for pid=4632 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_27_03.2587010141/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c482 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c88,c482 tclass=file permissive=0 Jul 11 00:27:21.678000 audit[4632]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007ee920 a2=fc6 a3=0 items=0 ppid=4242 pid=4632 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c482 key=(null) Jul 11 00:27:21.678000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:27:21.943468 kubelet[1941]: I0711 00:27:21.943370 1941 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:27:22.691491 env[1213]: time="2025-07-11T00:27:22.691354148Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.692824 env[1213]: time="2025-07-11T00:27:22.692785167Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.696358 env[1213]: time="2025-07-11T00:27:22.694537911Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.696358 env[1213]: time="2025-07-11T00:27:22.696175093Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.696730 env[1213]: time="2025-07-11T00:27:22.696684900Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 11 00:27:22.707038 env[1213]: time="2025-07-11T00:27:22.706657396Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 11 00:27:22.713947 env[1213]: time="2025-07-11T00:27:22.713909454Z" level=info msg="CreateContainer within sandbox \"815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 11 00:27:22.740000 env[1213]: time="2025-07-11T00:27:22.739955887Z" level=info msg="CreateContainer within sandbox \"815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"a231da26d8dc0559cf52d35d5cfdca322c6021e6ae3788de40d1878361c84961\"" Jul 11 00:27:22.741506 env[1213]: time="2025-07-11T00:27:22.740812499Z" level=info msg="StartContainer for \"a231da26d8dc0559cf52d35d5cfdca322c6021e6ae3788de40d1878361c84961\"" Jul 11 00:27:22.764936 systemd[1]: Started cri-containerd-a231da26d8dc0559cf52d35d5cfdca322c6021e6ae3788de40d1878361c84961.scope. Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit: BPF prog-id=224 op=LOAD Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4315 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132333164613236643864633035353963663532643335643563666463 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4315 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132333164613236643864633035353963663532643335643563666463 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit: BPF prog-id=225 op=LOAD Jul 11 00:27:22.784000 audit[4708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4315 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132333164613236643864633035353963663532643335643563666463 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit: BPF prog-id=226 op=LOAD Jul 11 00:27:22.784000 audit[4708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4315 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132333164613236643864633035353963663532643335643563666463 Jul 11 00:27:22.784000 audit: BPF prog-id=226 op=UNLOAD Jul 11 00:27:22.784000 audit: BPF prog-id=225 op=UNLOAD Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:22.784000 audit: BPF prog-id=227 op=LOAD Jul 11 00:27:22.784000 audit[4708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4315 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132333164613236643864633035353963663532643335643563666463 Jul 11 00:27:22.804351 env[1213]: time="2025-07-11T00:27:22.804305521Z" level=info msg="StartContainer for \"a231da26d8dc0559cf52d35d5cfdca322c6021e6ae3788de40d1878361c84961\" returns successfully" Jul 11 00:27:22.958893 env[1213]: time="2025-07-11T00:27:22.958789897Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.963654 kubelet[1941]: I0711 00:27:22.963597 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7cbb9bcc9f-ff556" podStartSLOduration=21.965988563 podStartE2EDuration="27.963579802s" podCreationTimestamp="2025-07-11 00:26:55 +0000 UTC" firstStartedPulling="2025-07-11 00:27:16.700321638 +0000 UTC m=+40.084714365" lastFinishedPulling="2025-07-11 00:27:22.697912877 +0000 UTC m=+46.082305604" observedRunningTime="2025-07-11 00:27:22.963321798 +0000 UTC m=+46.347714525" watchObservedRunningTime="2025-07-11 00:27:22.963579802 +0000 UTC m=+46.347972489" Jul 11 00:27:22.964036 kubelet[1941]: I0711 00:27:22.963815 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7cb6fc77df-ts4sp" podStartSLOduration=27.100152494 podStartE2EDuration="30.963810645s" podCreationTimestamp="2025-07-11 00:26:52 +0000 UTC" firstStartedPulling="2025-07-11 00:27:16.609321681 +0000 UTC m=+39.993714448" lastFinishedPulling="2025-07-11 00:27:20.472979872 +0000 UTC m=+43.857372599" observedRunningTime="2025-07-11 00:27:20.95397527 +0000 UTC m=+44.338367997" watchObservedRunningTime="2025-07-11 00:27:22.963810645 +0000 UTC m=+46.348203332" Jul 11 00:27:22.975485 env[1213]: time="2025-07-11T00:27:22.975444923Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.978299 env[1213]: time="2025-07-11T00:27:22.978261761Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.979981 env[1213]: time="2025-07-11T00:27:22.979942904Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:22.980617 env[1213]: time="2025-07-11T00:27:22.980579032Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 11 00:27:22.982379 env[1213]: time="2025-07-11T00:27:22.982346536Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 11 00:27:22.984418 env[1213]: time="2025-07-11T00:27:22.984388124Z" level=info msg="CreateContainer within sandbox \"1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:27:23.000751 env[1213]: time="2025-07-11T00:27:23.000700385Z" level=info msg="CreateContainer within sandbox \"1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f9f2c4816e4103dda7011b8570d77dcfbb17647b25f5694309d6816a1bde2154\"" Jul 11 00:27:23.001472 env[1213]: time="2025-07-11T00:27:23.001441475Z" level=info msg="StartContainer for \"f9f2c4816e4103dda7011b8570d77dcfbb17647b25f5694309d6816a1bde2154\"" Jul 11 00:27:23.022300 systemd[1]: Started cri-containerd-f9f2c4816e4103dda7011b8570d77dcfbb17647b25f5694309d6816a1bde2154.scope. Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.044000 audit: BPF prog-id=228 op=LOAD Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4385 pid=4777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639663263343831366534313033646461373031316238353730643737 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4385 pid=4777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639663263343831366534313033646461373031316238353730643737 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit: BPF prog-id=229 op=LOAD Jul 11 00:27:23.045000 audit[4777]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4385 pid=4777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639663263343831366534313033646461373031316238353730643737 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit: BPF prog-id=230 op=LOAD Jul 11 00:27:23.045000 audit[4777]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4385 pid=4777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639663263343831366534313033646461373031316238353730643737 Jul 11 00:27:23.045000 audit: BPF prog-id=230 op=UNLOAD Jul 11 00:27:23.045000 audit: BPF prog-id=229 op=UNLOAD Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { perfmon } for pid=4777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit[4777]: AVC avc: denied { bpf } for pid=4777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.045000 audit: BPF prog-id=231 op=LOAD Jul 11 00:27:23.045000 audit[4777]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4385 pid=4777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639663263343831366534313033646461373031316238353730643737 Jul 11 00:27:23.070949 env[1213]: time="2025-07-11T00:27:23.070900357Z" level=info msg="StartContainer for \"f9f2c4816e4103dda7011b8570d77dcfbb17647b25f5694309d6816a1bde2154\" returns successfully" Jul 11 00:27:23.883751 env[1213]: time="2025-07-11T00:27:23.883705066Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:23.885316 env[1213]: time="2025-07-11T00:27:23.885283887Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:23.886735 env[1213]: time="2025-07-11T00:27:23.886706226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:23.889220 env[1213]: time="2025-07-11T00:27:23.889161539Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:23.889694 env[1213]: time="2025-07-11T00:27:23.889658505Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 11 00:27:23.892399 env[1213]: time="2025-07-11T00:27:23.892360421Z" level=info msg="CreateContainer within sandbox \"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 11 00:27:23.907349 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2422826906.mount: Deactivated successfully. Jul 11 00:27:23.919012 env[1213]: time="2025-07-11T00:27:23.918962494Z" level=info msg="CreateContainer within sandbox \"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"fe9013e93f094d857f879533fa0e6ede16a48c2d3c79acae83283d1ac6d315ed\"" Jul 11 00:27:23.919834 env[1213]: time="2025-07-11T00:27:23.919803585Z" level=info msg="StartContainer for \"fe9013e93f094d857f879533fa0e6ede16a48c2d3c79acae83283d1ac6d315ed\"" Jul 11 00:27:23.941954 systemd[1]: Started cri-containerd-fe9013e93f094d857f879533fa0e6ede16a48c2d3c79acae83283d1ac6d315ed.scope. Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.980234 kernel: kauditd_printk_skb: 187 callbacks suppressed Jul 11 00:27:23.980333 kernel: audit: type=1400 audit(1752193643.976:1476): avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.980367 kernel: audit: type=1300 audit(1752193643.976:1476): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4492 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.976000 audit[4816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4492 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.982681 kernel: audit: type=1327 audit(1752193643.976:1476): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393031336539336630393464383537663837393533336661306536 Jul 11 00:27:23.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393031336539336630393464383537663837393533336661306536 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.987458 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.990073 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.995319 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:24.002308 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:24.002391 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:24.006273 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:24.009246 kernel: audit: type=1400 audit(1752193643.976:1477): avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit: BPF prog-id=232 op=LOAD Jul 11 00:27:23.976000 audit[4816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4492 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393031336539336630393464383537663837393533336661306536 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.976000 audit: BPF prog-id=233 op=LOAD Jul 11 00:27:23.976000 audit[4816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4492 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393031336539336630393464383537663837393533336661306536 Jul 11 00:27:23.979000 audit: BPF prog-id=233 op=UNLOAD Jul 11 00:27:23.979000 audit: BPF prog-id=232 op=UNLOAD Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { perfmon } for pid=4816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit[4816]: AVC avc: denied { bpf } for pid=4816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:23.979000 audit: BPF prog-id=234 op=LOAD Jul 11 00:27:23.979000 audit[4816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4492 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393031336539336630393464383537663837393533336661306536 Jul 11 00:27:24.012885 env[1213]: time="2025-07-11T00:27:24.012818817Z" level=info msg="StartContainer for \"fe9013e93f094d857f879533fa0e6ede16a48c2d3c79acae83283d1ac6d315ed\" returns successfully" Jul 11 00:27:24.014349 env[1213]: time="2025-07-11T00:27:24.014306956Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 11 00:27:24.014000 audit[4839]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=4839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:24.014000 audit[4839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd9d8f270 a2=0 a3=1 items=0 ppid=2050 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:24.014000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:24.021000 audit[4839]: NETFILTER_CFG table=nat:124 family=2 entries=22 op=nft_register_rule pid=4839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:24.021000 audit[4839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd9d8f270 a2=0 a3=1 items=0 ppid=2050 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:24.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:24.233000 audit[4787]: AVC avc: denied { watch } for pid=4787 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_27_03.4043110940/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c516,c941 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c516,c941 tclass=file permissive=0 Jul 11 00:27:24.233000 audit[4787]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000360f40 a2=fc6 a3=0 items=0 ppid=4385 pid=4787 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c516,c941 key=(null) Jul 11 00:27:24.233000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:27:24.707970 systemd[1]: run-containerd-runc-k8s.io-fe9013e93f094d857f879533fa0e6ede16a48c2d3c79acae83283d1ac6d315ed-runc.xw3bIS.mount: Deactivated successfully. Jul 11 00:27:24.959976 kubelet[1941]: I0711 00:27:24.959522 1941 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:27:25.035993 env[1213]: time="2025-07-11T00:27:25.035944226Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:25.037628 env[1213]: time="2025-07-11T00:27:25.037589687Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:25.039120 env[1213]: time="2025-07-11T00:27:25.039091506Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:25.040801 env[1213]: time="2025-07-11T00:27:25.040773928Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:27:25.041158 env[1213]: time="2025-07-11T00:27:25.041130332Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 11 00:27:25.043801 env[1213]: time="2025-07-11T00:27:25.043747086Z" level=info msg="CreateContainer within sandbox \"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 11 00:27:25.056185 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4014081271.mount: Deactivated successfully. Jul 11 00:27:25.058870 env[1213]: time="2025-07-11T00:27:25.058827318Z" level=info msg="CreateContainer within sandbox \"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"cc575343a88a44e6fb61b3cbd94a4fc9dea9304ceccb4c2eedee19ee924fcfaa\"" Jul 11 00:27:25.059644 env[1213]: time="2025-07-11T00:27:25.059619288Z" level=info msg="StartContainer for \"cc575343a88a44e6fb61b3cbd94a4fc9dea9304ceccb4c2eedee19ee924fcfaa\"" Jul 11 00:27:25.093782 systemd[1]: Started cri-containerd-cc575343a88a44e6fb61b3cbd94a4fc9dea9304ceccb4c2eedee19ee924fcfaa.scope. Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4492 pid=4853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:25.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353735333433613838613434653666623631623363626439346134 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit: BPF prog-id=235 op=LOAD Jul 11 00:27:25.121000 audit[4853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4492 pid=4853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:25.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353735333433613838613434653666623631623363626439346134 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit: BPF prog-id=236 op=LOAD Jul 11 00:27:25.121000 audit[4853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4492 pid=4853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:25.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353735333433613838613434653666623631623363626439346134 Jul 11 00:27:25.121000 audit: BPF prog-id=236 op=UNLOAD Jul 11 00:27:25.121000 audit: BPF prog-id=235 op=UNLOAD Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { perfmon } for pid=4853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit[4853]: AVC avc: denied { bpf } for pid=4853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:27:25.121000 audit: BPF prog-id=237 op=LOAD Jul 11 00:27:25.121000 audit[4853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4492 pid=4853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:25.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363353735333433613838613434653666623631623363626439346134 Jul 11 00:27:25.157498 env[1213]: time="2025-07-11T00:27:25.157441974Z" level=info msg="StartContainer for \"cc575343a88a44e6fb61b3cbd94a4fc9dea9304ceccb4c2eedee19ee924fcfaa\" returns successfully" Jul 11 00:27:25.708164 systemd[1]: run-containerd-runc-k8s.io-cc575343a88a44e6fb61b3cbd94a4fc9dea9304ceccb4c2eedee19ee924fcfaa-runc.ysJC95.mount: Deactivated successfully. Jul 11 00:27:25.780437 kubelet[1941]: I0711 00:27:25.780399 1941 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 11 00:27:25.781957 kubelet[1941]: I0711 00:27:25.781931 1941 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 11 00:27:25.875804 systemd[1]: Started sshd@9-10.0.0.54:22-10.0.0.1:58980.service. Jul 11 00:27:25.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.54:22-10.0.0.1:58980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:25.918000 audit[4887]: USER_ACCT pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:25.920162 sshd[4887]: Accepted publickey for core from 10.0.0.1 port 58980 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:25.920000 audit[4887]: CRED_ACQ pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:25.920000 audit[4887]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd025a700 a2=3 a3=1 items=0 ppid=1 pid=4887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:25.920000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:25.921886 sshd[4887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:25.925566 systemd-logind[1202]: New session 10 of user core. Jul 11 00:27:25.926485 systemd[1]: Started session-10.scope. Jul 11 00:27:25.928000 audit[4887]: USER_START pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:25.930000 audit[4889]: CRED_ACQ pid=4889 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:25.981253 kubelet[1941]: I0711 00:27:25.980965 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7cb6fc77df-5xrz7" podStartSLOduration=27.780503174 podStartE2EDuration="33.980950105s" podCreationTimestamp="2025-07-11 00:26:52 +0000 UTC" firstStartedPulling="2025-07-11 00:27:16.781326718 +0000 UTC m=+40.165719445" lastFinishedPulling="2025-07-11 00:27:22.981773649 +0000 UTC m=+46.366166376" observedRunningTime="2025-07-11 00:27:23.980897236 +0000 UTC m=+47.365289963" watchObservedRunningTime="2025-07-11 00:27:25.980950105 +0000 UTC m=+49.365342832" Jul 11 00:27:26.111569 sshd[4887]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:26.111000 audit[4887]: USER_END pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.111000 audit[4887]: CRED_DISP pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.114863 systemd-logind[1202]: Session 10 logged out. Waiting for processes to exit. Jul 11 00:27:26.116071 systemd[1]: Started sshd@10-10.0.0.54:22-10.0.0.1:58990.service. Jul 11 00:27:26.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.54:22-10.0.0.1:58990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:26.116667 systemd[1]: sshd@9-10.0.0.54:22-10.0.0.1:58980.service: Deactivated successfully. Jul 11 00:27:26.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.54:22-10.0.0.1:58980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:26.117440 systemd[1]: session-10.scope: Deactivated successfully. Jul 11 00:27:26.118081 systemd-logind[1202]: Removed session 10. Jul 11 00:27:26.149000 audit[4900]: USER_ACCT pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.150693 sshd[4900]: Accepted publickey for core from 10.0.0.1 port 58990 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:26.150000 audit[4900]: CRED_ACQ pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.150000 audit[4900]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6153ef0 a2=3 a3=1 items=0 ppid=1 pid=4900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:26.150000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:26.152306 sshd[4900]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:26.155844 systemd-logind[1202]: New session 11 of user core. Jul 11 00:27:26.156361 systemd[1]: Started session-11.scope. Jul 11 00:27:26.158000 audit[4900]: USER_START pid=4900 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.159000 audit[4903]: CRED_ACQ pid=4903 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.317453 sshd[4900]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:26.318000 audit[4900]: USER_END pid=4900 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.318000 audit[4900]: CRED_DISP pid=4900 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.321443 systemd[1]: sshd@10-10.0.0.54:22-10.0.0.1:58990.service: Deactivated successfully. Jul 11 00:27:26.322090 systemd[1]: session-11.scope: Deactivated successfully. Jul 11 00:27:26.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.54:22-10.0.0.1:58990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:26.322748 systemd-logind[1202]: Session 11 logged out. Waiting for processes to exit. Jul 11 00:27:26.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.54:22-10.0.0.1:59006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:26.323997 systemd[1]: Started sshd@11-10.0.0.54:22-10.0.0.1:59006.service. Jul 11 00:27:26.325003 systemd-logind[1202]: Removed session 11. Jul 11 00:27:26.374760 sshd[4913]: Accepted publickey for core from 10.0.0.1 port 59006 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:26.373000 audit[4913]: USER_ACCT pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.374000 audit[4913]: CRED_ACQ pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.374000 audit[4913]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3e5b3b0 a2=3 a3=1 items=0 ppid=1 pid=4913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:26.374000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:26.376222 sshd[4913]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:26.380124 systemd-logind[1202]: New session 12 of user core. Jul 11 00:27:26.380626 systemd[1]: Started session-12.scope. Jul 11 00:27:26.383000 audit[4913]: USER_START pid=4913 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.384000 audit[4915]: CRED_ACQ pid=4915 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.506846 sshd[4913]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:26.506000 audit[4913]: USER_END pid=4913 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.506000 audit[4913]: CRED_DISP pid=4913 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:26.509386 systemd[1]: session-12.scope: Deactivated successfully. Jul 11 00:27:26.509928 systemd-logind[1202]: Session 12 logged out. Waiting for processes to exit. Jul 11 00:27:26.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.54:22-10.0.0.1:59006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:26.510072 systemd[1]: sshd@11-10.0.0.54:22-10.0.0.1:59006.service: Deactivated successfully. Jul 11 00:27:26.511099 systemd-logind[1202]: Removed session 12. Jul 11 00:27:31.511431 systemd[1]: Started sshd@12-10.0.0.54:22-10.0.0.1:59018.service. Jul 11 00:27:31.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.54:22-10.0.0.1:59018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:31.512559 kernel: kauditd_printk_skb: 118 callbacks suppressed Jul 11 00:27:31.512628 kernel: audit: type=1130 audit(1752193651.510:1518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.54:22-10.0.0.1:59018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:31.547000 audit[4940]: USER_ACCT pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.548676 sshd[4940]: Accepted publickey for core from 10.0.0.1 port 59018 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:31.550073 sshd[4940]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:31.548000 audit[4940]: CRED_ACQ pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.553269 kernel: audit: type=1101 audit(1752193651.547:1519): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.553339 kernel: audit: type=1103 audit(1752193651.548:1520): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.553358 kernel: audit: type=1006 audit(1752193651.548:1521): pid=4940 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 11 00:27:31.548000 audit[4940]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2f99f60 a2=3 a3=1 items=0 ppid=1 pid=4940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:31.557959 kernel: audit: type=1300 audit(1752193651.548:1521): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2f99f60 a2=3 a3=1 items=0 ppid=1 pid=4940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:31.548000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:31.559226 kernel: audit: type=1327 audit(1752193651.548:1521): proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:31.560033 systemd-logind[1202]: New session 13 of user core. Jul 11 00:27:31.560975 systemd[1]: Started session-13.scope. Jul 11 00:27:31.563000 audit[4940]: USER_START pid=4940 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.566000 audit[4942]: CRED_ACQ pid=4942 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.569869 kernel: audit: type=1105 audit(1752193651.563:1522): pid=4940 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.569927 kernel: audit: type=1103 audit(1752193651.566:1523): pid=4942 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.710061 sshd[4940]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:31.710000 audit[4940]: USER_END pid=4940 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.713872 systemd[1]: sshd@12-10.0.0.54:22-10.0.0.1:59018.service: Deactivated successfully. Jul 11 00:27:31.710000 audit[4940]: CRED_DISP pid=4940 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.714700 systemd[1]: session-13.scope: Deactivated successfully. Jul 11 00:27:31.715216 systemd-logind[1202]: Session 13 logged out. Waiting for processes to exit. Jul 11 00:27:31.716065 systemd-logind[1202]: Removed session 13. Jul 11 00:27:31.716557 kernel: audit: type=1106 audit(1752193651.710:1524): pid=4940 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.716626 kernel: audit: type=1104 audit(1752193651.710:1525): pid=4940 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:31.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.54:22-10.0.0.1:59018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:32.323262 kubelet[1941]: I0711 00:27:32.323123 1941 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:27:32.347327 kubelet[1941]: I0711 00:27:32.347246 1941 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-nlm65" podStartSLOduration=29.386744721 podStartE2EDuration="37.347229119s" podCreationTimestamp="2025-07-11 00:26:55 +0000 UTC" firstStartedPulling="2025-07-11 00:27:17.081641187 +0000 UTC m=+40.466033874" lastFinishedPulling="2025-07-11 00:27:25.042125545 +0000 UTC m=+48.426518272" observedRunningTime="2025-07-11 00:27:25.981579473 +0000 UTC m=+49.365972200" watchObservedRunningTime="2025-07-11 00:27:32.347229119 +0000 UTC m=+55.731621806" Jul 11 00:27:32.367000 audit[4954]: NETFILTER_CFG table=filter:125 family=2 entries=11 op=nft_register_rule pid=4954 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:32.367000 audit[4954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd5c82bd0 a2=0 a3=1 items=0 ppid=2050 pid=4954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:32.367000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:32.375000 audit[4954]: NETFILTER_CFG table=nat:126 family=2 entries=29 op=nft_register_chain pid=4954 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:32.375000 audit[4954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd5c82bd0 a2=0 a3=1 items=0 ppid=2050 pid=4954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:32.375000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:34.176000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:34.176000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:34.176000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:34.176000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=40040f1050 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:27:34.176000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:27:34.176000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=400b338520 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:27:34.176000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:27:34.176000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=40055975f0 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:27:34.176000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:27:34.184000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:34.184000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4005597620 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:27:34.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:27:34.185000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:34.185000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4005ac4f60 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:27:34.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:27:34.186000 audit[1778]: AVC avc: denied { watch } for pid=1778 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:34.186000 audit[1778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400832a1b0 a2=fc6 a3=0 items=0 ppid=1656 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c304,c405 key=(null) Jul 11 00:27:34.186000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:27:35.427000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:35.427000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:35.427000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001921920 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:27:35.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:27:35.427000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40003e1860 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:27:35.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:27:36.692602 env[1213]: time="2025-07-11T00:27:36.692527104Z" level=info msg="StopPodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\"" Jul 11 00:27:36.714150 systemd[1]: Started sshd@13-10.0.0.54:22-10.0.0.1:52090.service. Jul 11 00:27:36.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.54:22-10.0.0.1:52090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:36.717442 kernel: kauditd_printk_skb: 31 callbacks suppressed Jul 11 00:27:36.717525 kernel: audit: type=1130 audit(1752193656.713:1537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.54:22-10.0.0.1:52090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:36.763000 audit[4973]: USER_ACCT pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.765327 sshd[4973]: Accepted publickey for core from 10.0.0.1 port 52090 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:36.767228 kernel: audit: type=1101 audit(1752193656.763:1538): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.767000 audit[4973]: CRED_ACQ pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.769865 sshd[4973]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:36.772228 kernel: audit: type=1103 audit(1752193656.767:1539): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.772325 kernel: audit: type=1006 audit(1752193656.767:1540): pid=4973 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 11 00:27:36.772351 kernel: audit: type=1300 audit(1752193656.767:1540): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe07564b0 a2=3 a3=1 items=0 ppid=1 pid=4973 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:36.767000 audit[4973]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe07564b0 a2=3 a3=1 items=0 ppid=1 pid=4973 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:36.767000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:36.775279 kernel: audit: type=1327 audit(1752193656.767:1540): proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:36.778162 systemd-logind[1202]: New session 14 of user core. Jul 11 00:27:36.779072 systemd[1]: Started session-14.scope. Jul 11 00:27:36.782000 audit[4973]: USER_START pid=4973 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.787247 kernel: audit: type=1105 audit(1752193656.782:1541): pid=4973 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.786000 audit[4984]: CRED_ACQ pid=4984 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.791219 kernel: audit: type=1103 audit(1752193656.786:1542): pid=4984 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.761 [WARNING][4965] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0", GenerateName:"calico-kube-controllers-7cbb9bcc9f-", Namespace:"calico-system", SelfLink:"", UID:"8dd2b46e-3124-43b5-a369-e2370d59a903", ResourceVersion:"1094", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7cbb9bcc9f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6", Pod:"calico-kube-controllers-7cbb9bcc9f-ff556", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0298d8fc8e8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.761 [INFO][4965] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.761 [INFO][4965] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" iface="eth0" netns="" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.762 [INFO][4965] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.762 [INFO][4965] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.797 [INFO][4978] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.797 [INFO][4978] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.797 [INFO][4978] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.805 [WARNING][4978] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.805 [INFO][4978] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.807 [INFO][4978] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:36.813453 env[1213]: 2025-07-11 00:27:36.810 [INFO][4965] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.813453 env[1213]: time="2025-07-11T00:27:36.813390445Z" level=info msg="TearDown network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" successfully" Jul 11 00:27:36.813453 env[1213]: time="2025-07-11T00:27:36.813428646Z" level=info msg="StopPodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" returns successfully" Jul 11 00:27:36.814043 env[1213]: time="2025-07-11T00:27:36.814011212Z" level=info msg="RemovePodSandbox for \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\"" Jul 11 00:27:36.814097 env[1213]: time="2025-07-11T00:27:36.814054173Z" level=info msg="Forcibly stopping sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\"" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.875 [WARNING][4997] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0", GenerateName:"calico-kube-controllers-7cbb9bcc9f-", Namespace:"calico-system", SelfLink:"", UID:"8dd2b46e-3124-43b5-a369-e2370d59a903", ResourceVersion:"1094", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7cbb9bcc9f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"815822d4b7f8c00b2a182b93b191e92cfe77803e8b0f6f9c63b7d1f568ba30d6", Pod:"calico-kube-controllers-7cbb9bcc9f-ff556", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0298d8fc8e8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.876 [INFO][4997] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.876 [INFO][4997] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" iface="eth0" netns="" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.876 [INFO][4997] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.876 [INFO][4997] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.914 [INFO][5013] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.918 [INFO][5013] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.918 [INFO][5013] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.932 [WARNING][5013] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.932 [INFO][5013] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" HandleID="k8s-pod-network.13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Workload="localhost-k8s-calico--kube--controllers--7cbb9bcc9f--ff556-eth0" Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.935 [INFO][5013] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:36.948322 env[1213]: 2025-07-11 00:27:36.938 [INFO][4997] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34" Jul 11 00:27:36.948322 env[1213]: time="2025-07-11T00:27:36.947648291Z" level=info msg="TearDown network for sandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" successfully" Jul 11 00:27:36.968910 env[1213]: time="2025-07-11T00:27:36.968847319Z" level=info msg="RemovePodSandbox \"13ee6e2ad180f5fed5a4df1ac93d29e9ee73b5d89e4a8349e4b4167caf2bef34\" returns successfully" Jul 11 00:27:36.969487 env[1213]: time="2025-07-11T00:27:36.969446326Z" level=info msg="StopPodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\"" Jul 11 00:27:37.023489 sshd[4973]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:37.023000 audit[4973]: USER_END pid=4973 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:37.026997 systemd[1]: sshd@13-10.0.0.54:22-10.0.0.1:52090.service: Deactivated successfully. Jul 11 00:27:37.027843 systemd[1]: session-14.scope: Deactivated successfully. Jul 11 00:27:37.024000 audit[4973]: CRED_DISP pid=4973 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:37.030227 kernel: audit: type=1106 audit(1752193657.023:1543): pid=4973 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:37.030361 kernel: audit: type=1104 audit(1752193657.024:1544): pid=4973 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:37.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.54:22-10.0.0.1:52090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:37.035410 systemd-logind[1202]: Session 14 logged out. Waiting for processes to exit. Jul 11 00:27:37.036443 systemd-logind[1202]: Removed session 14. Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.020 [WARNING][5033] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--xzph5-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe", Pod:"coredns-668d6bf9bc-xzph5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2f102e2f93a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.020 [INFO][5033] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.020 [INFO][5033] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" iface="eth0" netns="" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.020 [INFO][5033] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.020 [INFO][5033] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.045 [INFO][5041] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.045 [INFO][5041] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.045 [INFO][5041] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.055 [WARNING][5041] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.056 [INFO][5041] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.058 [INFO][5041] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.061925 env[1213]: 2025-07-11 00:27:37.060 [INFO][5033] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.062556 env[1213]: time="2025-07-11T00:27:37.062518680Z" level=info msg="TearDown network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" successfully" Jul 11 00:27:37.062633 env[1213]: time="2025-07-11T00:27:37.062615961Z" level=info msg="StopPodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" returns successfully" Jul 11 00:27:37.063652 env[1213]: time="2025-07-11T00:27:37.063622092Z" level=info msg="RemovePodSandbox for \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\"" Jul 11 00:27:37.063760 env[1213]: time="2025-07-11T00:27:37.063661572Z" level=info msg="Forcibly stopping sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\"" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.100 [WARNING][5063] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--xzph5-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5512b9d3-1bf0-4c89-a3a3-33f79b0f73ad", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1ab4b7752f0749367d5b483b2e5a44ce842be6bfc1a54689e16a03e4bd9dadbe", Pod:"coredns-668d6bf9bc-xzph5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2f102e2f93a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.100 [INFO][5063] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.100 [INFO][5063] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" iface="eth0" netns="" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.100 [INFO][5063] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.100 [INFO][5063] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.119 [INFO][5071] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.120 [INFO][5071] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.120 [INFO][5071] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.129 [WARNING][5071] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.129 [INFO][5071] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" HandleID="k8s-pod-network.cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Workload="localhost-k8s-coredns--668d6bf9bc--xzph5-eth0" Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.131 [INFO][5071] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.134862 env[1213]: 2025-07-11 00:27:37.133 [INFO][5063] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b" Jul 11 00:27:37.135435 env[1213]: time="2025-07-11T00:27:37.134896371Z" level=info msg="TearDown network for sandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" successfully" Jul 11 00:27:37.138951 env[1213]: time="2025-07-11T00:27:37.138121725Z" level=info msg="RemovePodSandbox \"cb2034e52e3ef299b3fd84772b1fb90192c9e54d679af9c24c552206f0a54d8b\" returns successfully" Jul 11 00:27:37.139378 env[1213]: time="2025-07-11T00:27:37.139250817Z" level=info msg="StopPodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\"" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.178 [WARNING][5090] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"22590bf7-c35e-4aef-831c-d97c50f394c2", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df", Pod:"goldmane-768f4c5c69-lbsrl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliadf02203129", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.178 [INFO][5090] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.178 [INFO][5090] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" iface="eth0" netns="" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.178 [INFO][5090] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.178 [INFO][5090] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.199 [INFO][5100] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.199 [INFO][5100] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.199 [INFO][5100] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.208 [WARNING][5100] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.208 [INFO][5100] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.210 [INFO][5100] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.214341 env[1213]: 2025-07-11 00:27:37.212 [INFO][5090] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.214341 env[1213]: time="2025-07-11T00:27:37.214311296Z" level=info msg="TearDown network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" successfully" Jul 11 00:27:37.214783 env[1213]: time="2025-07-11T00:27:37.214346577Z" level=info msg="StopPodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" returns successfully" Jul 11 00:27:37.215638 env[1213]: time="2025-07-11T00:27:37.215607550Z" level=info msg="RemovePodSandbox for \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\"" Jul 11 00:27:37.216336 env[1213]: time="2025-07-11T00:27:37.216152156Z" level=info msg="Forcibly stopping sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\"" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.252 [WARNING][5117] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"22590bf7-c35e-4aef-831c-d97c50f394c2", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65ba51e1c45ac4e4c7a59a62cfa1478022fd3cfb79395878e6f63a01a2d972df", Pod:"goldmane-768f4c5c69-lbsrl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliadf02203129", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.252 [INFO][5117] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.252 [INFO][5117] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" iface="eth0" netns="" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.253 [INFO][5117] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.253 [INFO][5117] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.272 [INFO][5126] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.272 [INFO][5126] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.272 [INFO][5126] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.282 [WARNING][5126] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.282 [INFO][5126] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" HandleID="k8s-pod-network.50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Workload="localhost-k8s-goldmane--768f4c5c69--lbsrl-eth0" Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.287 [INFO][5126] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.292482 env[1213]: 2025-07-11 00:27:37.290 [INFO][5117] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7" Jul 11 00:27:37.293021 env[1213]: time="2025-07-11T00:27:37.292978494Z" level=info msg="TearDown network for sandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" successfully" Jul 11 00:27:37.296135 env[1213]: time="2025-07-11T00:27:37.296089967Z" level=info msg="RemovePodSandbox \"50bd4bb4f368c1e497f991f0f95f19562602e07aa115ffb742e833acdffca5c7\" returns successfully" Jul 11 00:27:37.296892 env[1213]: time="2025-07-11T00:27:37.296830575Z" level=info msg="StopPodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\"" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.332 [WARNING][5144] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a2f06025-1162-4925-a86c-399f3bdfe4ae", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e", Pod:"calico-apiserver-7cb6fc77df-5xrz7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d6dee90049", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.332 [INFO][5144] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.333 [INFO][5144] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" iface="eth0" netns="" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.333 [INFO][5144] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.333 [INFO][5144] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.352 [INFO][5153] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.352 [INFO][5153] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.352 [INFO][5153] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.361 [WARNING][5153] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.361 [INFO][5153] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.363 [INFO][5153] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.367919 env[1213]: 2025-07-11 00:27:37.366 [INFO][5144] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.368547 env[1213]: time="2025-07-11T00:27:37.367943292Z" level=info msg="TearDown network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" successfully" Jul 11 00:27:37.368547 env[1213]: time="2025-07-11T00:27:37.367982452Z" level=info msg="StopPodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" returns successfully" Jul 11 00:27:37.368547 env[1213]: time="2025-07-11T00:27:37.368464857Z" level=info msg="RemovePodSandbox for \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\"" Jul 11 00:27:37.368547 env[1213]: time="2025-07-11T00:27:37.368497898Z" level=info msg="Forcibly stopping sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\"" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.419 [WARNING][5171] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a2f06025-1162-4925-a86c-399f3bdfe4ae", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1dea7037329183d1a0cab40e6d0462ab6845fdd39dffb60a61a33dd64ff46a2e", Pod:"calico-apiserver-7cb6fc77df-5xrz7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d6dee90049", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.420 [INFO][5171] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.420 [INFO][5171] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" iface="eth0" netns="" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.420 [INFO][5171] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.420 [INFO][5171] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.449 [INFO][5180] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.449 [INFO][5180] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.449 [INFO][5180] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.459 [WARNING][5180] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.459 [INFO][5180] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" HandleID="k8s-pod-network.17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--5xrz7-eth0" Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.461 [INFO][5180] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.464495 env[1213]: 2025-07-11 00:27:37.462 [INFO][5171] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2" Jul 11 00:27:37.464495 env[1213]: time="2025-07-11T00:27:37.464476720Z" level=info msg="TearDown network for sandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" successfully" Jul 11 00:27:37.467383 env[1213]: time="2025-07-11T00:27:37.467343630Z" level=info msg="RemovePodSandbox \"17a912d540747b5ff47e53d580531cf1e61d5f8c377f5f8906ecb0a153ad1ad2\" returns successfully" Jul 11 00:27:37.467921 env[1213]: time="2025-07-11T00:27:37.467883156Z" level=info msg="StopPodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\"" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.501 [WARNING][5197] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"311c407f-000e-45a9-abaa-20e369f1001f", ResourceVersion:"1173", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b", Pod:"calico-apiserver-7cb6fc77df-ts4sp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2b46797827c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.501 [INFO][5197] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.501 [INFO][5197] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" iface="eth0" netns="" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.501 [INFO][5197] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.501 [INFO][5197] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.519 [INFO][5205] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.519 [INFO][5205] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.519 [INFO][5205] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.527 [WARNING][5205] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.527 [INFO][5205] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.528 [INFO][5205] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.532287 env[1213]: 2025-07-11 00:27:37.530 [INFO][5197] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.532718 env[1213]: time="2025-07-11T00:27:37.532324962Z" level=info msg="TearDown network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" successfully" Jul 11 00:27:37.532718 env[1213]: time="2025-07-11T00:27:37.532357642Z" level=info msg="StopPodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" returns successfully" Jul 11 00:27:37.532908 env[1213]: time="2025-07-11T00:27:37.532853087Z" level=info msg="RemovePodSandbox for \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\"" Jul 11 00:27:37.532944 env[1213]: time="2025-07-11T00:27:37.532901888Z" level=info msg="Forcibly stopping sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\"" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.566 [WARNING][5223] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0", GenerateName:"calico-apiserver-7cb6fc77df-", Namespace:"calico-apiserver", SelfLink:"", UID:"311c407f-000e-45a9-abaa-20e369f1001f", ResourceVersion:"1173", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cb6fc77df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fc9cbb1cb66de99e428b627c416359c46bb030eeef260d787e63d2207745671b", Pod:"calico-apiserver-7cb6fc77df-ts4sp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2b46797827c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.566 [INFO][5223] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.566 [INFO][5223] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" iface="eth0" netns="" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.566 [INFO][5223] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.566 [INFO][5223] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.583 [INFO][5232] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.583 [INFO][5232] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.583 [INFO][5232] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.591 [WARNING][5232] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.591 [INFO][5232] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" HandleID="k8s-pod-network.d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Workload="localhost-k8s-calico--apiserver--7cb6fc77df--ts4sp-eth0" Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.593 [INFO][5232] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.596349 env[1213]: 2025-07-11 00:27:37.594 [INFO][5223] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751" Jul 11 00:27:37.596769 env[1213]: time="2025-07-11T00:27:37.596362004Z" level=info msg="TearDown network for sandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" successfully" Jul 11 00:27:37.599118 env[1213]: time="2025-07-11T00:27:37.599082673Z" level=info msg="RemovePodSandbox \"d00421c8ad2cdda90dc5f495099f4f425dc895b8c08f7986832d8a32f8c9e751\" returns successfully" Jul 11 00:27:37.599693 env[1213]: time="2025-07-11T00:27:37.599658559Z" level=info msg="StopPodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\"" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.639 [WARNING][5250] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" WorkloadEndpoint="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.639 [INFO][5250] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.639 [INFO][5250] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" iface="eth0" netns="" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.639 [INFO][5250] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.639 [INFO][5250] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.658 [INFO][5258] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.659 [INFO][5258] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.659 [INFO][5258] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.666 [WARNING][5258] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.667 [INFO][5258] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.668 [INFO][5258] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.671858 env[1213]: 2025-07-11 00:27:37.670 [INFO][5250] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.672339 env[1213]: time="2025-07-11T00:27:37.671885568Z" level=info msg="TearDown network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" successfully" Jul 11 00:27:37.672339 env[1213]: time="2025-07-11T00:27:37.671918528Z" level=info msg="StopPodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" returns successfully" Jul 11 00:27:37.672386 env[1213]: time="2025-07-11T00:27:37.672347653Z" level=info msg="RemovePodSandbox for \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\"" Jul 11 00:27:37.672420 env[1213]: time="2025-07-11T00:27:37.672381533Z" level=info msg="Forcibly stopping sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\"" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.706 [WARNING][5276] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" WorkloadEndpoint="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.706 [INFO][5276] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.706 [INFO][5276] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" iface="eth0" netns="" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.706 [INFO][5276] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.706 [INFO][5276] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.726 [INFO][5284] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.726 [INFO][5284] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.726 [INFO][5284] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.737 [WARNING][5284] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.737 [INFO][5284] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" HandleID="k8s-pod-network.565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Workload="localhost-k8s-whisker--5c6d9bfb76--b6tn2-eth0" Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.740 [INFO][5284] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.744235 env[1213]: 2025-07-11 00:27:37.742 [INFO][5276] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2" Jul 11 00:27:37.744782 env[1213]: time="2025-07-11T00:27:37.744215698Z" level=info msg="TearDown network for sandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" successfully" Jul 11 00:27:37.747416 env[1213]: time="2025-07-11T00:27:37.747364451Z" level=info msg="RemovePodSandbox \"565bc898664607f6deddbac69ec0b3c0c1e8e5b8d6b5923a1b0e2510f0889fb2\" returns successfully" Jul 11 00:27:37.747938 env[1213]: time="2025-07-11T00:27:37.747912577Z" level=info msg="StopPodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\"" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.782 [WARNING][5302] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--m97fq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"d13d205f-ef30-472a-ac7f-86f872056c53", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8", Pod:"coredns-668d6bf9bc-m97fq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid2003879460", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.782 [INFO][5302] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.782 [INFO][5302] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" iface="eth0" netns="" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.782 [INFO][5302] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.782 [INFO][5302] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.803 [INFO][5312] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.804 [INFO][5312] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.804 [INFO][5312] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.813 [WARNING][5312] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.813 [INFO][5312] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.814 [INFO][5312] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.818022 env[1213]: 2025-07-11 00:27:37.816 [INFO][5302] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.818686 env[1213]: time="2025-07-11T00:27:37.818649970Z" level=info msg="TearDown network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" successfully" Jul 11 00:27:37.818761 env[1213]: time="2025-07-11T00:27:37.818741491Z" level=info msg="StopPodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" returns successfully" Jul 11 00:27:37.819286 env[1213]: time="2025-07-11T00:27:37.819219616Z" level=info msg="RemovePodSandbox for \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\"" Jul 11 00:27:37.819286 env[1213]: time="2025-07-11T00:27:37.819260137Z" level=info msg="Forcibly stopping sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\"" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.855 [WARNING][5330] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--m97fq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"d13d205f-ef30-472a-ac7f-86f872056c53", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49a244ec6cdae34e13f7ba4675d70e76af371aa8064b19eb5f060bea5a40c0e8", Pod:"coredns-668d6bf9bc-m97fq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid2003879460", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.856 [INFO][5330] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.856 [INFO][5330] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" iface="eth0" netns="" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.856 [INFO][5330] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.856 [INFO][5330] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.874 [INFO][5338] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.874 [INFO][5338] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.874 [INFO][5338] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.884 [WARNING][5338] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.884 [INFO][5338] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" HandleID="k8s-pod-network.f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Workload="localhost-k8s-coredns--668d6bf9bc--m97fq-eth0" Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.885 [INFO][5338] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.891526 env[1213]: 2025-07-11 00:27:37.887 [INFO][5330] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2" Jul 11 00:27:37.891957 env[1213]: time="2025-07-11T00:27:37.891555546Z" level=info msg="TearDown network for sandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" successfully" Jul 11 00:27:37.894557 env[1213]: time="2025-07-11T00:27:37.894506738Z" level=info msg="RemovePodSandbox \"f687cb673d26e4e86a0e3f14ee75dc52e24ec95557ebb08eb6cc3a1850863da2\" returns successfully" Jul 11 00:27:37.895220 env[1213]: time="2025-07-11T00:27:37.895175545Z" level=info msg="StopPodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\"" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.929 [WARNING][5356] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nlm65-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d23addcf-0d96-4e31-8fa7-1460f1e178d3", ResourceVersion:"1127", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef", Pod:"csi-node-driver-nlm65", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fc737a8f7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.929 [INFO][5356] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.929 [INFO][5356] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" iface="eth0" netns="" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.929 [INFO][5356] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.929 [INFO][5356] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.948 [INFO][5365] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.948 [INFO][5365] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.948 [INFO][5365] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.958 [WARNING][5365] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.958 [INFO][5365] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.959 [INFO][5365] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:37.963221 env[1213]: 2025-07-11 00:27:37.961 [INFO][5356] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:37.963664 env[1213]: time="2025-07-11T00:27:37.963249310Z" level=info msg="TearDown network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" successfully" Jul 11 00:27:37.963664 env[1213]: time="2025-07-11T00:27:37.963282190Z" level=info msg="StopPodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" returns successfully" Jul 11 00:27:37.963786 env[1213]: time="2025-07-11T00:27:37.963754955Z" level=info msg="RemovePodSandbox for \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\"" Jul 11 00:27:37.963833 env[1213]: time="2025-07-11T00:27:37.963795315Z" level=info msg="Forcibly stopping sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\"" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:37.997 [WARNING][5384] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nlm65-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d23addcf-0d96-4e31-8fa7-1460f1e178d3", ResourceVersion:"1127", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 26, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2857047b06f6eebcca3316ffc3c52c81100249149b0dfbc153e07db0dd86c6ef", Pod:"csi-node-driver-nlm65", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fc737a8f7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:37.997 [INFO][5384] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:37.997 [INFO][5384] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" iface="eth0" netns="" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:37.998 [INFO][5384] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:37.998 [INFO][5384] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.023 [INFO][5392] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.024 [INFO][5392] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.024 [INFO][5392] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.032 [WARNING][5392] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.032 [INFO][5392] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" HandleID="k8s-pod-network.eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Workload="localhost-k8s-csi--node--driver--nlm65-eth0" Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.034 [INFO][5392] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:27:38.039707 env[1213]: 2025-07-11 00:27:38.036 [INFO][5384] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8" Jul 11 00:27:38.040313 env[1213]: time="2025-07-11T00:27:38.039745520Z" level=info msg="TearDown network for sandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" successfully" Jul 11 00:27:38.045196 env[1213]: time="2025-07-11T00:27:38.043799762Z" level=info msg="RemovePodSandbox \"eec3947d30cce11d3962343443b0649681b0edb8c9bd7f8457444322f0f709e8\" returns successfully" Jul 11 00:27:38.556000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:38.556000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001618ac0 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:27:38.556000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:27:38.556000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:38.556000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dc23a0 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:27:38.556000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:27:38.556000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:38.556000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018d34c0 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:27:38.556000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:27:38.557000 audit[1813]: AVC avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:27:38.557000 audit[1813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001618ae0 a2=fc6 a3=0 items=0 ppid=1655 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c450,c591 key=(null) Jul 11 00:27:38.557000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:27:42.028591 systemd[1]: Started sshd@14-10.0.0.54:22-10.0.0.1:52098.service. Jul 11 00:27:42.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.54:22-10.0.0.1:52098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:42.029958 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 11 00:27:42.030018 kernel: audit: type=1130 audit(1752193662.027:1550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.54:22-10.0.0.1:52098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:42.070000 audit[5424]: USER_ACCT pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.072175 sshd[5424]: Accepted publickey for core from 10.0.0.1 port 52098 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:42.073537 sshd[5424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:42.071000 audit[5424]: CRED_ACQ pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.076536 kernel: audit: type=1101 audit(1752193662.070:1551): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.076623 kernel: audit: type=1103 audit(1752193662.071:1552): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.078109 kernel: audit: type=1006 audit(1752193662.072:1553): pid=5424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 11 00:27:42.072000 audit[5424]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90ff1b0 a2=3 a3=1 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:42.080801 kernel: audit: type=1300 audit(1752193662.072:1553): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90ff1b0 a2=3 a3=1 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:42.082478 kernel: audit: type=1327 audit(1752193662.072:1553): proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:42.072000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:42.084279 systemd-logind[1202]: New session 15 of user core. Jul 11 00:27:42.085226 systemd[1]: Started session-15.scope. Jul 11 00:27:42.087000 audit[5424]: USER_START pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.090000 audit[5426]: CRED_ACQ pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.094049 kernel: audit: type=1105 audit(1752193662.087:1554): pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.094116 kernel: audit: type=1103 audit(1752193662.090:1555): pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.257656 sshd[5424]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:42.258000 audit[5424]: USER_END pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.258000 audit[5424]: CRED_DISP pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.262327 systemd[1]: Started sshd@15-10.0.0.54:22-10.0.0.1:52112.service. Jul 11 00:27:42.262987 systemd[1]: sshd@14-10.0.0.54:22-10.0.0.1:52098.service: Deactivated successfully. Jul 11 00:27:42.263779 systemd[1]: session-15.scope: Deactivated successfully. Jul 11 00:27:42.264189 kernel: audit: type=1106 audit(1752193662.258:1556): pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.264437 kernel: audit: type=1104 audit(1752193662.258:1557): pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.54:22-10.0.0.1:52112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:42.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.54:22-10.0.0.1:52098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:42.265641 systemd-logind[1202]: Session 15 logged out. Waiting for processes to exit. Jul 11 00:27:42.266753 systemd-logind[1202]: Removed session 15. Jul 11 00:27:42.296000 audit[5437]: USER_ACCT pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.298460 sshd[5437]: Accepted publickey for core from 10.0.0.1 port 52112 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:42.299000 audit[5437]: CRED_ACQ pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.299000 audit[5437]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe8b7f50 a2=3 a3=1 items=0 ppid=1 pid=5437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:42.299000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:42.300724 sshd[5437]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:42.304547 systemd-logind[1202]: New session 16 of user core. Jul 11 00:27:42.305499 systemd[1]: Started session-16.scope. Jul 11 00:27:42.307000 audit[5437]: USER_START pid=5437 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.308000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.524893 sshd[5437]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:42.524000 audit[5437]: USER_END pid=5437 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.524000 audit[5437]: CRED_DISP pid=5437 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.529840 systemd[1]: Started sshd@16-10.0.0.54:22-10.0.0.1:56704.service. Jul 11 00:27:42.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.54:22-10.0.0.1:56704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:42.530500 systemd[1]: sshd@15-10.0.0.54:22-10.0.0.1:52112.service: Deactivated successfully. Jul 11 00:27:42.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.54:22-10.0.0.1:52112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:42.531504 systemd[1]: session-16.scope: Deactivated successfully. Jul 11 00:27:42.532073 systemd-logind[1202]: Session 16 logged out. Waiting for processes to exit. Jul 11 00:27:42.533355 systemd-logind[1202]: Removed session 16. Jul 11 00:27:42.567000 audit[5448]: USER_ACCT pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.569157 sshd[5448]: Accepted publickey for core from 10.0.0.1 port 56704 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:42.568000 audit[5448]: CRED_ACQ pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.568000 audit[5448]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0b92fc0 a2=3 a3=1 items=0 ppid=1 pid=5448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:42.568000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:42.570346 sshd[5448]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:42.573937 systemd-logind[1202]: New session 17 of user core. Jul 11 00:27:42.574845 systemd[1]: Started session-17.scope. Jul 11 00:27:42.577000 audit[5448]: USER_START pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.578000 audit[5451]: CRED_ACQ pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:42.939602 kubelet[1941]: I0711 00:27:42.939410 1941 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:27:43.115000 audit[5464]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:43.115000 audit[5464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffad5bca0 a2=0 a3=1 items=0 ppid=2050 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:43.115000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:43.121000 audit[5464]: NETFILTER_CFG table=nat:128 family=2 entries=36 op=nft_register_chain pid=5464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:43.121000 audit[5464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffffad5bca0 a2=0 a3=1 items=0 ppid=2050 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:43.121000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:43.259000 audit[5466]: NETFILTER_CFG table=filter:129 family=2 entries=22 op=nft_register_rule pid=5466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:43.259000 audit[5466]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffd5997f00 a2=0 a3=1 items=0 ppid=2050 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:43.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:43.273648 sshd[5448]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:43.273000 audit[5448]: USER_END pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.273000 audit[5448]: CRED_DISP pid=5448 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.274000 audit[5466]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=5466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:43.274000 audit[5466]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffd5997f00 a2=0 a3=1 items=0 ppid=2050 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:43.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:43.278239 systemd[1]: Started sshd@17-10.0.0.54:22-10.0.0.1:56708.service. Jul 11 00:27:43.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.54:22-10.0.0.1:56708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:43.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.54:22-10.0.0.1:56704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:43.278805 systemd[1]: sshd@16-10.0.0.54:22-10.0.0.1:56704.service: Deactivated successfully. Jul 11 00:27:43.279655 systemd[1]: session-17.scope: Deactivated successfully. Jul 11 00:27:43.280442 systemd-logind[1202]: Session 17 logged out. Waiting for processes to exit. Jul 11 00:27:43.281274 systemd-logind[1202]: Removed session 17. Jul 11 00:27:43.315000 audit[5468]: USER_ACCT pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.316602 sshd[5468]: Accepted publickey for core from 10.0.0.1 port 56708 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:43.316000 audit[5468]: CRED_ACQ pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.316000 audit[5468]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffece13700 a2=3 a3=1 items=0 ppid=1 pid=5468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:43.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:43.318452 sshd[5468]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:43.322699 systemd[1]: Started session-18.scope. Jul 11 00:27:43.322860 systemd-logind[1202]: New session 18 of user core. Jul 11 00:27:43.325000 audit[5468]: USER_START pid=5468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.326000 audit[5471]: CRED_ACQ pid=5471 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.737396 sshd[5468]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:43.738000 audit[5468]: USER_END pid=5468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.738000 audit[5468]: CRED_DISP pid=5468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.54:22-10.0.0.1:56712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:43.741496 systemd[1]: Started sshd@18-10.0.0.54:22-10.0.0.1:56712.service. Jul 11 00:27:43.742056 systemd[1]: sshd@17-10.0.0.54:22-10.0.0.1:56708.service: Deactivated successfully. Jul 11 00:27:43.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.54:22-10.0.0.1:56708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:43.743049 systemd[1]: session-18.scope: Deactivated successfully. Jul 11 00:27:43.744569 systemd-logind[1202]: Session 18 logged out. Waiting for processes to exit. Jul 11 00:27:43.745814 systemd-logind[1202]: Removed session 18. Jul 11 00:27:43.780000 audit[5480]: USER_ACCT pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.782460 sshd[5480]: Accepted publickey for core from 10.0.0.1 port 56712 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:43.782000 audit[5480]: CRED_ACQ pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.782000 audit[5480]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdfda1f0 a2=3 a3=1 items=0 ppid=1 pid=5480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:43.782000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:43.784448 sshd[5480]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:43.787957 systemd-logind[1202]: New session 19 of user core. Jul 11 00:27:43.788922 systemd[1]: Started session-19.scope. Jul 11 00:27:43.791000 audit[5480]: USER_START pid=5480 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.792000 audit[5483]: CRED_ACQ pid=5483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.925009 sshd[5480]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:43.924000 audit[5480]: USER_END pid=5480 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.924000 audit[5480]: CRED_DISP pid=5480 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:43.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.54:22-10.0.0.1:56712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:43.927753 systemd[1]: sshd@18-10.0.0.54:22-10.0.0.1:56712.service: Deactivated successfully. Jul 11 00:27:43.928593 systemd[1]: session-19.scope: Deactivated successfully. Jul 11 00:27:43.929072 systemd-logind[1202]: Session 19 logged out. Waiting for processes to exit. Jul 11 00:27:43.929841 systemd-logind[1202]: Removed session 19. Jul 11 00:27:44.290000 audit[5494]: NETFILTER_CFG table=filter:131 family=2 entries=34 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:44.290000 audit[5494]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffdd4ecdb0 a2=0 a3=1 items=0 ppid=2050 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:44.290000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:44.301000 audit[5494]: NETFILTER_CFG table=nat:132 family=2 entries=24 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:44.301000 audit[5494]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffdd4ecdb0 a2=0 a3=1 items=0 ppid=2050 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:44.301000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:45.711271 kubelet[1941]: E0711 00:27:45.711231 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:27:48.094000 audit[5499]: NETFILTER_CFG table=filter:133 family=2 entries=22 op=nft_register_rule pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:48.097483 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 11 00:27:48.097568 kernel: audit: type=1325 audit(1752193668.094:1601): table=filter:133 family=2 entries=22 op=nft_register_rule pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:48.097598 kernel: audit: type=1300 audit(1752193668.094:1601): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdb4c4720 a2=0 a3=1 items=0 ppid=2050 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:48.094000 audit[5499]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdb4c4720 a2=0 a3=1 items=0 ppid=2050 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:48.094000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:48.101494 kernel: audit: type=1327 audit(1752193668.094:1601): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:48.104000 audit[5499]: NETFILTER_CFG table=nat:134 family=2 entries=108 op=nft_register_chain pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:48.104000 audit[5499]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=ffffdb4c4720 a2=0 a3=1 items=0 ppid=2050 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:48.110519 kernel: audit: type=1325 audit(1752193668.104:1602): table=nat:134 family=2 entries=108 op=nft_register_chain pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:48.110591 kernel: audit: type=1300 audit(1752193668.104:1602): arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=ffffdb4c4720 a2=0 a3=1 items=0 ppid=2050 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:48.110610 kernel: audit: type=1327 audit(1752193668.104:1602): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:48.104000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:48.929557 systemd[1]: Started sshd@19-10.0.0.54:22-10.0.0.1:56714.service. Jul 11 00:27:48.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.54:22-10.0.0.1:56714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:48.932218 kernel: audit: type=1130 audit(1752193668.928:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.54:22-10.0.0.1:56714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:48.961000 audit[5501]: USER_ACCT pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:48.962557 sshd[5501]: Accepted publickey for core from 10.0.0.1 port 56714 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:48.964020 sshd[5501]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:48.962000 audit[5501]: CRED_ACQ pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:48.967325 kernel: audit: type=1101 audit(1752193668.961:1604): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:48.967369 kernel: audit: type=1103 audit(1752193668.962:1605): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:48.969172 kernel: audit: type=1006 audit(1752193668.962:1606): pid=5501 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 11 00:27:48.962000 audit[5501]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc743ef0 a2=3 a3=1 items=0 ppid=1 pid=5501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:48.962000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:48.971008 systemd-logind[1202]: New session 20 of user core. Jul 11 00:27:48.971485 systemd[1]: Started session-20.scope. Jul 11 00:27:48.974000 audit[5501]: USER_START pid=5501 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:48.975000 audit[5503]: CRED_ACQ pid=5503 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:49.116508 sshd[5501]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:49.116000 audit[5501]: USER_END pid=5501 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:49.116000 audit[5501]: CRED_DISP pid=5501 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:49.119061 systemd[1]: sshd@19-10.0.0.54:22-10.0.0.1:56714.service: Deactivated successfully. Jul 11 00:27:49.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.54:22-10.0.0.1:56714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:49.119867 systemd[1]: session-20.scope: Deactivated successfully. Jul 11 00:27:49.120419 systemd-logind[1202]: Session 20 logged out. Waiting for processes to exit. Jul 11 00:27:49.121067 systemd-logind[1202]: Removed session 20. Jul 11 00:27:51.042000 audit[5561]: NETFILTER_CFG table=filter:135 family=2 entries=9 op=nft_register_rule pid=5561 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:51.042000 audit[5561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc793b610 a2=0 a3=1 items=0 ppid=2050 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:51.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:51.049000 audit[5561]: NETFILTER_CFG table=nat:136 family=2 entries=55 op=nft_register_chain pid=5561 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:27:51.049000 audit[5561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=ffffc793b610 a2=0 a3=1 items=0 ppid=2050 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:51.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:27:54.121384 systemd[1]: Started sshd@20-10.0.0.54:22-10.0.0.1:37292.service. Jul 11 00:27:54.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.54:22-10.0.0.1:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:54.122236 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 11 00:27:54.122407 kernel: audit: type=1130 audit(1752193674.120:1614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.54:22-10.0.0.1:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:54.160000 audit[5583]: USER_ACCT pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.161771 sshd[5583]: Accepted publickey for core from 10.0.0.1 port 37292 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:54.163401 sshd[5583]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:54.161000 audit[5583]: CRED_ACQ pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.166725 kernel: audit: type=1101 audit(1752193674.160:1615): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.166775 kernel: audit: type=1103 audit(1752193674.161:1616): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.166804 kernel: audit: type=1006 audit(1752193674.161:1617): pid=5583 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 11 00:27:54.161000 audit[5583]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf0357d0 a2=3 a3=1 items=0 ppid=1 pid=5583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:54.171036 kernel: audit: type=1300 audit(1752193674.161:1617): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf0357d0 a2=3 a3=1 items=0 ppid=1 pid=5583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:54.171087 kernel: audit: type=1327 audit(1752193674.161:1617): proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:54.161000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:54.174907 systemd[1]: Started session-21.scope. Jul 11 00:27:54.175505 systemd-logind[1202]: New session 21 of user core. Jul 11 00:27:54.178000 audit[5583]: USER_START pid=5583 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.179000 audit[5585]: CRED_ACQ pid=5585 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.184473 kernel: audit: type=1105 audit(1752193674.178:1618): pid=5583 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.184544 kernel: audit: type=1103 audit(1752193674.179:1619): pid=5585 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.355040 sshd[5583]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:54.354000 audit[5583]: USER_END pid=5583 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.354000 audit[5583]: CRED_DISP pid=5583 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.360825 systemd[1]: sshd@20-10.0.0.54:22-10.0.0.1:37292.service: Deactivated successfully. Jul 11 00:27:54.360970 kernel: audit: type=1106 audit(1752193674.354:1620): pid=5583 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.361005 kernel: audit: type=1104 audit(1752193674.354:1621): pid=5583 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:54.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.54:22-10.0.0.1:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:54.361620 systemd[1]: session-21.scope: Deactivated successfully. Jul 11 00:27:54.362186 systemd-logind[1202]: Session 21 logged out. Waiting for processes to exit. Jul 11 00:27:54.362986 systemd-logind[1202]: Removed session 21. Jul 11 00:27:59.359660 systemd[1]: Started sshd@21-10.0.0.54:22-10.0.0.1:37302.service. Jul 11 00:27:59.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.54:22-10.0.0.1:37302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:59.360733 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 11 00:27:59.360784 kernel: audit: type=1130 audit(1752193679.358:1623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.54:22-10.0.0.1:37302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:27:59.401000 audit[5599]: USER_ACCT pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.402491 sshd[5599]: Accepted publickey for core from 10.0.0.1 port 37302 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:27:59.403835 sshd[5599]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:27:59.402000 audit[5599]: CRED_ACQ pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.407066 kernel: audit: type=1101 audit(1752193679.401:1624): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.407150 kernel: audit: type=1103 audit(1752193679.402:1625): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.407179 kernel: audit: type=1006 audit(1752193679.402:1626): pid=5599 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 11 00:27:59.408560 kernel: audit: type=1300 audit(1752193679.402:1626): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe48da460 a2=3 a3=1 items=0 ppid=1 pid=5599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:59.402000 audit[5599]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe48da460 a2=3 a3=1 items=0 ppid=1 pid=5599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:27:59.408788 systemd-logind[1202]: New session 22 of user core. Jul 11 00:27:59.409062 systemd[1]: Started session-22.scope. Jul 11 00:27:59.402000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:59.411555 kernel: audit: type=1327 audit(1752193679.402:1626): proctitle=737368643A20636F7265205B707269765D Jul 11 00:27:59.412000 audit[5599]: USER_START pid=5599 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.413000 audit[5601]: CRED_ACQ pid=5601 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.418990 kernel: audit: type=1105 audit(1752193679.412:1627): pid=5599 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.419054 kernel: audit: type=1103 audit(1752193679.413:1628): pid=5601 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.573856 sshd[5599]: pam_unix(sshd:session): session closed for user core Jul 11 00:27:59.573000 audit[5599]: USER_END pid=5599 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.576688 systemd[1]: sshd@21-10.0.0.54:22-10.0.0.1:37302.service: Deactivated successfully. Jul 11 00:27:59.573000 audit[5599]: CRED_DISP pid=5599 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.577525 systemd[1]: session-22.scope: Deactivated successfully. Jul 11 00:27:59.578317 systemd-logind[1202]: Session 22 logged out. Waiting for processes to exit. Jul 11 00:27:59.579050 systemd-logind[1202]: Removed session 22. Jul 11 00:27:59.579505 kernel: audit: type=1106 audit(1752193679.573:1629): pid=5599 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.579569 kernel: audit: type=1104 audit(1752193679.573:1630): pid=5599 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:27:59.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.54:22-10.0.0.1:37302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:04.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.54:22-10.0.0.1:40484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:04.579306 systemd[1]: Started sshd@22-10.0.0.54:22-10.0.0.1:40484.service. Jul 11 00:28:04.582919 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 11 00:28:04.583041 kernel: audit: type=1130 audit(1752193684.578:1632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.54:22-10.0.0.1:40484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:04.631000 audit[5612]: USER_ACCT pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.632632 sshd[5612]: Accepted publickey for core from 10.0.0.1 port 40484 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:28:04.634367 sshd[5612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:28:04.632000 audit[5612]: CRED_ACQ pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.641173 kernel: audit: type=1101 audit(1752193684.631:1633): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.641262 kernel: audit: type=1103 audit(1752193684.632:1634): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.641283 kernel: audit: type=1006 audit(1752193684.632:1635): pid=5612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 11 00:28:04.632000 audit[5612]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff27cf940 a2=3 a3=1 items=0 ppid=1 pid=5612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:04.643153 systemd[1]: Started session-23.scope. Jul 11 00:28:04.643346 systemd-logind[1202]: New session 23 of user core. Jul 11 00:28:04.644944 kernel: audit: type=1300 audit(1752193684.632:1635): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff27cf940 a2=3 a3=1 items=0 ppid=1 pid=5612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:28:04.649468 kernel: audit: type=1327 audit(1752193684.632:1635): proctitle=737368643A20636F7265205B707269765D Jul 11 00:28:04.632000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:28:04.649000 audit[5612]: USER_START pid=5612 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.650000 audit[5614]: CRED_ACQ pid=5614 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.655597 kernel: audit: type=1105 audit(1752193684.649:1636): pid=5612 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.655674 kernel: audit: type=1103 audit(1752193684.650:1637): pid=5614 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.713235 kubelet[1941]: E0711 00:28:04.711801 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:28:04.839738 sshd[5612]: pam_unix(sshd:session): session closed for user core Jul 11 00:28:04.839000 audit[5612]: USER_END pid=5612 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.842981 systemd[1]: sshd@22-10.0.0.54:22-10.0.0.1:40484.service: Deactivated successfully. Jul 11 00:28:04.843772 systemd[1]: session-23.scope: Deactivated successfully. Jul 11 00:28:04.839000 audit[5612]: CRED_DISP pid=5612 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.844124 systemd-logind[1202]: Session 23 logged out. Waiting for processes to exit. Jul 11 00:28:04.844745 systemd-logind[1202]: Removed session 23. Jul 11 00:28:04.845941 kernel: audit: type=1106 audit(1752193684.839:1638): pid=5612 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.845989 kernel: audit: type=1104 audit(1752193684.839:1639): pid=5612 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:28:04.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.54:22-10.0.0.1:40484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:28:05.712477 kubelet[1941]: E0711 00:28:05.712401 1941 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"