Jul 11 00:34:25.754507 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 11 00:34:25.754526 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Thu Jul 10 23:22:35 -00 2025 Jul 11 00:34:25.754534 kernel: efi: EFI v2.70 by EDK II Jul 11 00:34:25.754540 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 11 00:34:25.754545 kernel: random: crng init done Jul 11 00:34:25.754550 kernel: ACPI: Early table checksum verification disabled Jul 11 00:34:25.754557 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 11 00:34:25.754563 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 11 00:34:25.754569 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754574 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754580 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754585 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754591 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754596 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754604 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754610 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754616 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:34:25.754622 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 11 00:34:25.754628 kernel: NUMA: Failed to initialise from firmware Jul 11 00:34:25.754634 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:34:25.754640 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 11 00:34:25.754645 kernel: Zone ranges: Jul 11 00:34:25.754651 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:34:25.754658 kernel: DMA32 empty Jul 11 00:34:25.754663 kernel: Normal empty Jul 11 00:34:25.754669 kernel: Movable zone start for each node Jul 11 00:34:25.754675 kernel: Early memory node ranges Jul 11 00:34:25.754680 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 11 00:34:25.754686 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 11 00:34:25.754692 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 11 00:34:25.754698 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 11 00:34:25.754704 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 11 00:34:25.754709 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 11 00:34:25.754715 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 11 00:34:25.754721 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:34:25.754728 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 11 00:34:25.754734 kernel: psci: probing for conduit method from ACPI. Jul 11 00:34:25.754740 kernel: psci: PSCIv1.1 detected in firmware. Jul 11 00:34:25.754746 kernel: psci: Using standard PSCI v0.2 function IDs Jul 11 00:34:25.754752 kernel: psci: Trusted OS migration not required Jul 11 00:34:25.754760 kernel: psci: SMC Calling Convention v1.1 Jul 11 00:34:25.754766 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 11 00:34:25.754773 kernel: ACPI: SRAT not present Jul 11 00:34:25.754780 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 11 00:34:25.754786 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 11 00:34:25.754808 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 11 00:34:25.754814 kernel: Detected PIPT I-cache on CPU0 Jul 11 00:34:25.754821 kernel: CPU features: detected: GIC system register CPU interface Jul 11 00:34:25.754827 kernel: CPU features: detected: Hardware dirty bit management Jul 11 00:34:25.754833 kernel: CPU features: detected: Spectre-v4 Jul 11 00:34:25.754839 kernel: CPU features: detected: Spectre-BHB Jul 11 00:34:25.754847 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 11 00:34:25.754853 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 11 00:34:25.754859 kernel: CPU features: detected: ARM erratum 1418040 Jul 11 00:34:25.754865 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 11 00:34:25.754872 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 11 00:34:25.754878 kernel: Policy zone: DMA Jul 11 00:34:25.754885 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:34:25.754891 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 11 00:34:25.754898 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 11 00:34:25.754904 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 11 00:34:25.754910 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 11 00:34:25.754918 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 11 00:34:25.754938 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 11 00:34:25.754944 kernel: trace event string verifier disabled Jul 11 00:34:25.754950 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 11 00:34:25.754957 kernel: rcu: RCU event tracing is enabled. Jul 11 00:34:25.754963 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 11 00:34:25.754970 kernel: Trampoline variant of Tasks RCU enabled. Jul 11 00:34:25.754976 kernel: Tracing variant of Tasks RCU enabled. Jul 11 00:34:25.754982 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 11 00:34:25.754988 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 11 00:34:25.754995 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 11 00:34:25.755002 kernel: GICv3: 256 SPIs implemented Jul 11 00:34:25.755008 kernel: GICv3: 0 Extended SPIs implemented Jul 11 00:34:25.755014 kernel: GICv3: Distributor has no Range Selector support Jul 11 00:34:25.755020 kernel: Root IRQ handler: gic_handle_irq Jul 11 00:34:25.755026 kernel: GICv3: 16 PPIs implemented Jul 11 00:34:25.755033 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 11 00:34:25.755039 kernel: ACPI: SRAT not present Jul 11 00:34:25.755045 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 11 00:34:25.755052 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 11 00:34:25.755058 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 11 00:34:25.755064 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 11 00:34:25.755070 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 11 00:34:25.755077 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:34:25.755084 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 11 00:34:25.755090 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 11 00:34:25.755096 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 11 00:34:25.755102 kernel: arm-pv: using stolen time PV Jul 11 00:34:25.755109 kernel: Console: colour dummy device 80x25 Jul 11 00:34:25.755115 kernel: ACPI: Core revision 20210730 Jul 11 00:34:25.755122 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 11 00:34:25.755128 kernel: pid_max: default: 32768 minimum: 301 Jul 11 00:34:25.755134 kernel: LSM: Security Framework initializing Jul 11 00:34:25.755142 kernel: SELinux: Initializing. Jul 11 00:34:25.755148 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:34:25.755155 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:34:25.755161 kernel: rcu: Hierarchical SRCU implementation. Jul 11 00:34:25.755167 kernel: Platform MSI: ITS@0x8080000 domain created Jul 11 00:34:25.755174 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 11 00:34:25.755180 kernel: Remapping and enabling EFI services. Jul 11 00:34:25.755186 kernel: smp: Bringing up secondary CPUs ... Jul 11 00:34:25.755192 kernel: Detected PIPT I-cache on CPU1 Jul 11 00:34:25.755200 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 11 00:34:25.755206 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 11 00:34:25.755213 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:34:25.755219 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 11 00:34:25.755226 kernel: Detected PIPT I-cache on CPU2 Jul 11 00:34:25.755233 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 11 00:34:25.755239 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 11 00:34:25.755246 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:34:25.755252 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 11 00:34:25.755258 kernel: Detected PIPT I-cache on CPU3 Jul 11 00:34:25.755266 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 11 00:34:25.755273 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 11 00:34:25.755279 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:34:25.755285 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 11 00:34:25.755296 kernel: smp: Brought up 1 node, 4 CPUs Jul 11 00:34:25.755304 kernel: SMP: Total of 4 processors activated. Jul 11 00:34:25.755311 kernel: CPU features: detected: 32-bit EL0 Support Jul 11 00:34:25.755317 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 11 00:34:25.755324 kernel: CPU features: detected: Common not Private translations Jul 11 00:34:25.755331 kernel: CPU features: detected: CRC32 instructions Jul 11 00:34:25.755337 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 11 00:34:25.755344 kernel: CPU features: detected: LSE atomic instructions Jul 11 00:34:25.755351 kernel: CPU features: detected: Privileged Access Never Jul 11 00:34:25.755358 kernel: CPU features: detected: RAS Extension Support Jul 11 00:34:25.755365 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 11 00:34:25.755371 kernel: CPU: All CPU(s) started at EL1 Jul 11 00:34:25.755378 kernel: alternatives: patching kernel code Jul 11 00:34:25.755386 kernel: devtmpfs: initialized Jul 11 00:34:25.755392 kernel: KASLR enabled Jul 11 00:34:25.755399 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 11 00:34:25.755406 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 11 00:34:25.755413 kernel: pinctrl core: initialized pinctrl subsystem Jul 11 00:34:25.755419 kernel: SMBIOS 3.0.0 present. Jul 11 00:34:25.755426 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 11 00:34:25.755433 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 11 00:34:25.755439 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 11 00:34:25.755448 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 11 00:34:25.755455 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 11 00:34:25.755462 kernel: audit: initializing netlink subsys (disabled) Jul 11 00:34:25.755474 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Jul 11 00:34:25.755481 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 11 00:34:25.755488 kernel: cpuidle: using governor menu Jul 11 00:34:25.755494 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 11 00:34:25.755501 kernel: ASID allocator initialised with 32768 entries Jul 11 00:34:25.755508 kernel: ACPI: bus type PCI registered Jul 11 00:34:25.755516 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 11 00:34:25.755522 kernel: Serial: AMBA PL011 UART driver Jul 11 00:34:25.755529 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 11 00:34:25.755535 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 11 00:34:25.755542 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 11 00:34:25.755549 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 11 00:34:25.755555 kernel: cryptd: max_cpu_qlen set to 1000 Jul 11 00:34:25.755562 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 11 00:34:25.755569 kernel: ACPI: Added _OSI(Module Device) Jul 11 00:34:25.755577 kernel: ACPI: Added _OSI(Processor Device) Jul 11 00:34:25.755583 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 11 00:34:25.755590 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 11 00:34:25.755596 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 11 00:34:25.755603 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 11 00:34:25.755610 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 11 00:34:25.755616 kernel: ACPI: Interpreter enabled Jul 11 00:34:25.755623 kernel: ACPI: Using GIC for interrupt routing Jul 11 00:34:25.755629 kernel: ACPI: MCFG table detected, 1 entries Jul 11 00:34:25.755637 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 11 00:34:25.755643 kernel: printk: console [ttyAMA0] enabled Jul 11 00:34:25.755650 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 11 00:34:25.755767 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 11 00:34:25.755846 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 11 00:34:25.755905 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 11 00:34:25.755962 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 11 00:34:25.756022 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 11 00:34:25.756031 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 11 00:34:25.756038 kernel: PCI host bridge to bus 0000:00 Jul 11 00:34:25.756102 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 11 00:34:25.756155 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 11 00:34:25.756206 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 11 00:34:25.756259 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 11 00:34:25.756331 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 11 00:34:25.756404 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 11 00:34:25.756465 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 11 00:34:25.756535 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 11 00:34:25.756594 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:34:25.756652 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:34:25.756710 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 11 00:34:25.756772 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 11 00:34:25.756836 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 11 00:34:25.756891 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 11 00:34:25.756944 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 11 00:34:25.756953 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 11 00:34:25.756960 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 11 00:34:25.756966 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 11 00:34:25.756974 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 11 00:34:25.756981 kernel: iommu: Default domain type: Translated Jul 11 00:34:25.756988 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 11 00:34:25.756994 kernel: vgaarb: loaded Jul 11 00:34:25.757001 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 11 00:34:25.757008 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 11 00:34:25.757014 kernel: PTP clock support registered Jul 11 00:34:25.757021 kernel: Registered efivars operations Jul 11 00:34:25.757027 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 11 00:34:25.757034 kernel: VFS: Disk quotas dquot_6.6.0 Jul 11 00:34:25.757042 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 11 00:34:25.757049 kernel: pnp: PnP ACPI init Jul 11 00:34:25.757113 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 11 00:34:25.757122 kernel: pnp: PnP ACPI: found 1 devices Jul 11 00:34:25.757129 kernel: NET: Registered PF_INET protocol family Jul 11 00:34:25.757136 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 11 00:34:25.757142 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 11 00:34:25.757149 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 11 00:34:25.757158 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 11 00:34:25.757164 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 11 00:34:25.757171 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 11 00:34:25.757178 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:34:25.757184 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:34:25.757191 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 11 00:34:25.757198 kernel: PCI: CLS 0 bytes, default 64 Jul 11 00:34:25.757204 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 11 00:34:25.757211 kernel: kvm [1]: HYP mode not available Jul 11 00:34:25.757219 kernel: Initialise system trusted keyrings Jul 11 00:34:25.757226 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 11 00:34:25.757232 kernel: Key type asymmetric registered Jul 11 00:34:25.757239 kernel: Asymmetric key parser 'x509' registered Jul 11 00:34:25.757245 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 11 00:34:25.757252 kernel: io scheduler mq-deadline registered Jul 11 00:34:25.757258 kernel: io scheduler kyber registered Jul 11 00:34:25.757265 kernel: io scheduler bfq registered Jul 11 00:34:25.757271 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 11 00:34:25.757279 kernel: ACPI: button: Power Button [PWRB] Jul 11 00:34:25.757286 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 11 00:34:25.757345 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 11 00:34:25.757354 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 11 00:34:25.757361 kernel: thunder_xcv, ver 1.0 Jul 11 00:34:25.757368 kernel: thunder_bgx, ver 1.0 Jul 11 00:34:25.757374 kernel: nicpf, ver 1.0 Jul 11 00:34:25.757381 kernel: nicvf, ver 1.0 Jul 11 00:34:25.757445 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 11 00:34:25.757514 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-11T00:34:25 UTC (1752194065) Jul 11 00:34:25.757524 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 11 00:34:25.757531 kernel: NET: Registered PF_INET6 protocol family Jul 11 00:34:25.757538 kernel: Segment Routing with IPv6 Jul 11 00:34:25.757544 kernel: In-situ OAM (IOAM) with IPv6 Jul 11 00:34:25.757551 kernel: NET: Registered PF_PACKET protocol family Jul 11 00:34:25.757558 kernel: Key type dns_resolver registered Jul 11 00:34:25.757565 kernel: registered taskstats version 1 Jul 11 00:34:25.757573 kernel: Loading compiled-in X.509 certificates Jul 11 00:34:25.757580 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: e29f2f0310c2b60e0457f826e7476605fb3b6ab2' Jul 11 00:34:25.757586 kernel: Key type .fscrypt registered Jul 11 00:34:25.757593 kernel: Key type fscrypt-provisioning registered Jul 11 00:34:25.757600 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 11 00:34:25.757606 kernel: ima: Allocated hash algorithm: sha1 Jul 11 00:34:25.757613 kernel: ima: No architecture policies found Jul 11 00:34:25.757619 kernel: clk: Disabling unused clocks Jul 11 00:34:25.757626 kernel: Freeing unused kernel memory: 36416K Jul 11 00:34:25.757634 kernel: Run /init as init process Jul 11 00:34:25.757640 kernel: with arguments: Jul 11 00:34:25.757647 kernel: /init Jul 11 00:34:25.757653 kernel: with environment: Jul 11 00:34:25.757660 kernel: HOME=/ Jul 11 00:34:25.757667 kernel: TERM=linux Jul 11 00:34:25.757673 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 11 00:34:25.757682 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:34:25.757692 systemd[1]: Detected virtualization kvm. Jul 11 00:34:25.757700 systemd[1]: Detected architecture arm64. Jul 11 00:34:25.757707 systemd[1]: Running in initrd. Jul 11 00:34:25.757714 systemd[1]: No hostname configured, using default hostname. Jul 11 00:34:25.757720 systemd[1]: Hostname set to . Jul 11 00:34:25.757728 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:34:25.757735 systemd[1]: Queued start job for default target initrd.target. Jul 11 00:34:25.757742 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:34:25.757751 systemd[1]: Reached target cryptsetup.target. Jul 11 00:34:25.757758 systemd[1]: Reached target paths.target. Jul 11 00:34:25.757765 systemd[1]: Reached target slices.target. Jul 11 00:34:25.757772 systemd[1]: Reached target swap.target. Jul 11 00:34:25.757779 systemd[1]: Reached target timers.target. Jul 11 00:34:25.757787 systemd[1]: Listening on iscsid.socket. Jul 11 00:34:25.757803 systemd[1]: Listening on iscsiuio.socket. Jul 11 00:34:25.757812 systemd[1]: Listening on systemd-journald-audit.socket. Jul 11 00:34:25.757819 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 11 00:34:25.757826 systemd[1]: Listening on systemd-journald.socket. Jul 11 00:34:25.757834 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:34:25.757841 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:34:25.757848 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:34:25.757855 systemd[1]: Reached target sockets.target. Jul 11 00:34:25.757862 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:34:25.757869 systemd[1]: Finished network-cleanup.service. Jul 11 00:34:25.757878 systemd[1]: Starting systemd-fsck-usr.service... Jul 11 00:34:25.757885 systemd[1]: Starting systemd-journald.service... Jul 11 00:34:25.757892 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:34:25.757899 systemd[1]: Starting systemd-resolved.service... Jul 11 00:34:25.757906 systemd[1]: Starting systemd-vconsole-setup.service... Jul 11 00:34:25.757913 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:34:25.757920 systemd[1]: Finished systemd-fsck-usr.service. Jul 11 00:34:25.757927 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 11 00:34:25.757934 systemd[1]: Finished systemd-vconsole-setup.service. Jul 11 00:34:25.757943 systemd[1]: Starting dracut-cmdline-ask.service... Jul 11 00:34:25.757950 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 11 00:34:25.757957 kernel: audit: type=1130 audit(1752194065.756:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.757968 systemd-journald[290]: Journal started Jul 11 00:34:25.758007 systemd-journald[290]: Runtime Journal (/run/log/journal/d98674c59d1c45da98d6624e6cdf2ac4) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:34:25.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.741296 systemd-modules-load[291]: Inserted module 'overlay' Jul 11 00:34:25.761808 systemd[1]: Started systemd-journald.service. Jul 11 00:34:25.761844 kernel: audit: type=1130 audit(1752194065.760:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.770872 systemd[1]: Finished dracut-cmdline-ask.service. Jul 11 00:34:25.773921 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 11 00:34:25.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.774040 systemd[1]: Starting dracut-cmdline.service... Jul 11 00:34:25.777866 kernel: audit: type=1130 audit(1752194065.773:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.774661 systemd-resolved[292]: Positive Trust Anchors: Jul 11 00:34:25.779868 kernel: Bridge firewalling registered Jul 11 00:34:25.774668 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:34:25.774696 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:34:25.779425 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 11 00:34:25.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.781073 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 11 00:34:25.791314 kernel: audit: type=1130 audit(1752194065.786:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.782018 systemd[1]: Started systemd-resolved.service. Jul 11 00:34:25.787648 systemd[1]: Reached target nss-lookup.target. Jul 11 00:34:25.794256 kernel: SCSI subsystem initialized Jul 11 00:34:25.794819 dracut-cmdline[308]: dracut-dracut-053 Jul 11 00:34:25.796919 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:34:25.802956 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 11 00:34:25.802984 kernel: device-mapper: uevent: version 1.0.3 Jul 11 00:34:25.804307 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 11 00:34:25.806537 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 11 00:34:25.807282 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:34:25.808826 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:34:25.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.812801 kernel: audit: type=1130 audit(1752194065.808:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.815436 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:34:25.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.819811 kernel: audit: type=1130 audit(1752194065.815:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.856819 kernel: Loading iSCSI transport class v2.0-870. Jul 11 00:34:25.868813 kernel: iscsi: registered transport (tcp) Jul 11 00:34:25.887815 kernel: iscsi: registered transport (qla4xxx) Jul 11 00:34:25.887830 kernel: QLogic iSCSI HBA Driver Jul 11 00:34:25.921059 systemd[1]: Finished dracut-cmdline.service. Jul 11 00:34:25.924802 kernel: audit: type=1130 audit(1752194065.921:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:25.922726 systemd[1]: Starting dracut-pre-udev.service... Jul 11 00:34:25.969823 kernel: raid6: neonx8 gen() 13708 MB/s Jul 11 00:34:25.986811 kernel: raid6: neonx8 xor() 10728 MB/s Jul 11 00:34:26.003813 kernel: raid6: neonx4 gen() 13442 MB/s Jul 11 00:34:26.020810 kernel: raid6: neonx4 xor() 11092 MB/s Jul 11 00:34:26.037811 kernel: raid6: neonx2 gen() 12947 MB/s Jul 11 00:34:26.054810 kernel: raid6: neonx2 xor() 10330 MB/s Jul 11 00:34:26.071810 kernel: raid6: neonx1 gen() 10485 MB/s Jul 11 00:34:26.088812 kernel: raid6: neonx1 xor() 8737 MB/s Jul 11 00:34:26.105808 kernel: raid6: int64x8 gen() 6235 MB/s Jul 11 00:34:26.122808 kernel: raid6: int64x8 xor() 3520 MB/s Jul 11 00:34:26.139810 kernel: raid6: int64x4 gen() 7155 MB/s Jul 11 00:34:26.156809 kernel: raid6: int64x4 xor() 3820 MB/s Jul 11 00:34:26.173811 kernel: raid6: int64x2 gen() 6115 MB/s Jul 11 00:34:26.190808 kernel: raid6: int64x2 xor() 3303 MB/s Jul 11 00:34:26.207813 kernel: raid6: int64x1 gen() 5011 MB/s Jul 11 00:34:26.224884 kernel: raid6: int64x1 xor() 2631 MB/s Jul 11 00:34:26.224896 kernel: raid6: using algorithm neonx8 gen() 13708 MB/s Jul 11 00:34:26.224906 kernel: raid6: .... xor() 10728 MB/s, rmw enabled Jul 11 00:34:26.225953 kernel: raid6: using neon recovery algorithm Jul 11 00:34:26.237122 kernel: xor: measuring software checksum speed Jul 11 00:34:26.237152 kernel: 8regs : 17227 MB/sec Jul 11 00:34:26.237168 kernel: 32regs : 20712 MB/sec Jul 11 00:34:26.238314 kernel: arm64_neon : 27710 MB/sec Jul 11 00:34:26.238325 kernel: xor: using function: arm64_neon (27710 MB/sec) Jul 11 00:34:26.292812 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 11 00:34:26.301978 systemd[1]: Finished dracut-pre-udev.service. Jul 11 00:34:26.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:26.303860 systemd[1]: Starting systemd-udevd.service... Jul 11 00:34:26.307599 kernel: audit: type=1130 audit(1752194066.301:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:26.307618 kernel: audit: type=1334 audit(1752194066.302:10): prog-id=7 op=LOAD Jul 11 00:34:26.302000 audit: BPF prog-id=7 op=LOAD Jul 11 00:34:26.302000 audit: BPF prog-id=8 op=LOAD Jul 11 00:34:26.318691 systemd-udevd[493]: Using default interface naming scheme 'v252'. Jul 11 00:34:26.323039 systemd[1]: Started systemd-udevd.service. Jul 11 00:34:26.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:26.324509 systemd[1]: Starting dracut-pre-trigger.service... Jul 11 00:34:26.335129 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Jul 11 00:34:26.359874 systemd[1]: Finished dracut-pre-trigger.service. Jul 11 00:34:26.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:26.361306 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:34:26.393684 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:34:26.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:26.422057 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 11 00:34:26.426813 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 11 00:34:26.426827 kernel: GPT:9289727 != 19775487 Jul 11 00:34:26.426835 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 11 00:34:26.426849 kernel: GPT:9289727 != 19775487 Jul 11 00:34:26.426857 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 11 00:34:26.426865 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:34:26.438818 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (559) Jul 11 00:34:26.441549 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 11 00:34:26.444576 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 11 00:34:26.445561 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 11 00:34:26.449941 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 11 00:34:26.454352 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:34:26.458053 systemd[1]: Starting disk-uuid.service... Jul 11 00:34:26.464517 disk-uuid[568]: Primary Header is updated. Jul 11 00:34:26.464517 disk-uuid[568]: Secondary Entries is updated. Jul 11 00:34:26.464517 disk-uuid[568]: Secondary Header is updated. Jul 11 00:34:26.467804 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:34:27.479802 disk-uuid[569]: The operation has completed successfully. Jul 11 00:34:27.481110 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:34:27.504286 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 11 00:34:27.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.504388 systemd[1]: Finished disk-uuid.service. Jul 11 00:34:27.505958 systemd[1]: Starting verity-setup.service... Jul 11 00:34:27.519811 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 11 00:34:27.539420 systemd[1]: Found device dev-mapper-usr.device. Jul 11 00:34:27.541527 systemd[1]: Mounting sysusr-usr.mount... Jul 11 00:34:27.543310 systemd[1]: Finished verity-setup.service. Jul 11 00:34:27.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.585812 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 11 00:34:27.586329 systemd[1]: Mounted sysusr-usr.mount. Jul 11 00:34:27.587198 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 11 00:34:27.587860 systemd[1]: Starting ignition-setup.service... Jul 11 00:34:27.590223 systemd[1]: Starting parse-ip-for-networkd.service... Jul 11 00:34:27.596069 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:34:27.596105 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:34:27.596114 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:34:27.603829 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 11 00:34:27.609073 systemd[1]: Finished ignition-setup.service. Jul 11 00:34:27.610539 systemd[1]: Starting ignition-fetch-offline.service... Jul 11 00:34:27.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.676507 systemd[1]: Finished parse-ip-for-networkd.service. Jul 11 00:34:27.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.677000 audit: BPF prog-id=9 op=LOAD Jul 11 00:34:27.678578 systemd[1]: Starting systemd-networkd.service... Jul 11 00:34:27.694139 ignition[650]: Ignition 2.14.0 Jul 11 00:34:27.694149 ignition[650]: Stage: fetch-offline Jul 11 00:34:27.694186 ignition[650]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:34:27.694194 ignition[650]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:34:27.694348 ignition[650]: parsed url from cmdline: "" Jul 11 00:34:27.694352 ignition[650]: no config URL provided Jul 11 00:34:27.694357 ignition[650]: reading system config file "/usr/lib/ignition/user.ign" Jul 11 00:34:27.694369 ignition[650]: no config at "/usr/lib/ignition/user.ign" Jul 11 00:34:27.694387 ignition[650]: op(1): [started] loading QEMU firmware config module Jul 11 00:34:27.694392 ignition[650]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 11 00:34:27.697823 ignition[650]: op(1): [finished] loading QEMU firmware config module Jul 11 00:34:27.704703 systemd-networkd[742]: lo: Link UP Jul 11 00:34:27.704714 systemd-networkd[742]: lo: Gained carrier Jul 11 00:34:27.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.705113 systemd-networkd[742]: Enumeration completed Jul 11 00:34:27.705196 systemd[1]: Started systemd-networkd.service. Jul 11 00:34:27.705296 systemd-networkd[742]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:34:27.706244 systemd-networkd[742]: eth0: Link UP Jul 11 00:34:27.706247 systemd-networkd[742]: eth0: Gained carrier Jul 11 00:34:27.706483 systemd[1]: Reached target network.target. Jul 11 00:34:27.708535 systemd[1]: Starting iscsiuio.service... Jul 11 00:34:27.717212 systemd[1]: Started iscsiuio.service. Jul 11 00:34:27.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.718732 systemd[1]: Starting iscsid.service... Jul 11 00:34:27.721959 iscsid[750]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:34:27.721959 iscsid[750]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 11 00:34:27.721959 iscsid[750]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 11 00:34:27.721959 iscsid[750]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 11 00:34:27.721959 iscsid[750]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:34:27.721959 iscsid[750]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 11 00:34:27.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.724636 systemd[1]: Started iscsid.service. Jul 11 00:34:27.725875 systemd-networkd[742]: eth0: DHCPv4 address 10.0.0.93/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:34:27.730102 systemd[1]: Starting dracut-initqueue.service... Jul 11 00:34:27.739843 systemd[1]: Finished dracut-initqueue.service. Jul 11 00:34:27.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.740743 systemd[1]: Reached target remote-fs-pre.target. Jul 11 00:34:27.742228 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:34:27.743660 systemd[1]: Reached target remote-fs.target. Jul 11 00:34:27.745893 systemd[1]: Starting dracut-pre-mount.service... Jul 11 00:34:27.753366 systemd[1]: Finished dracut-pre-mount.service. Jul 11 00:34:27.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.766065 ignition[650]: parsing config with SHA512: 74d63d518d9d574dd9b096b9c51e493d41c8a00f9457945bd61188813ce122eb012e77bb88a7fd56372602d50809b59f5062cbd23ffb48cf7d0d4aa57b445b7d Jul 11 00:34:27.773156 unknown[650]: fetched base config from "system" Jul 11 00:34:27.773173 unknown[650]: fetched user config from "qemu" Jul 11 00:34:27.773817 ignition[650]: fetch-offline: fetch-offline passed Jul 11 00:34:27.774643 systemd[1]: Finished ignition-fetch-offline.service. Jul 11 00:34:27.773886 ignition[650]: Ignition finished successfully Jul 11 00:34:27.777155 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 11 00:34:27.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.777888 systemd[1]: Starting ignition-kargs.service... Jul 11 00:34:27.786990 ignition[764]: Ignition 2.14.0 Jul 11 00:34:27.786999 ignition[764]: Stage: kargs Jul 11 00:34:27.787090 ignition[764]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:34:27.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.789129 systemd[1]: Finished ignition-kargs.service. Jul 11 00:34:27.787100 ignition[764]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:34:27.790685 systemd[1]: Starting ignition-disks.service... Jul 11 00:34:27.787905 ignition[764]: kargs: kargs passed Jul 11 00:34:27.787944 ignition[764]: Ignition finished successfully Jul 11 00:34:27.797388 ignition[770]: Ignition 2.14.0 Jul 11 00:34:27.797397 ignition[770]: Stage: disks Jul 11 00:34:27.797494 ignition[770]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:34:27.797503 ignition[770]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:34:27.798382 ignition[770]: disks: disks passed Jul 11 00:34:27.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.800200 systemd[1]: Finished ignition-disks.service. Jul 11 00:34:27.798420 ignition[770]: Ignition finished successfully Jul 11 00:34:27.801820 systemd[1]: Reached target initrd-root-device.target. Jul 11 00:34:27.802907 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:34:27.804179 systemd[1]: Reached target local-fs.target. Jul 11 00:34:27.805404 systemd[1]: Reached target sysinit.target. Jul 11 00:34:27.806665 systemd[1]: Reached target basic.target. Jul 11 00:34:27.808689 systemd[1]: Starting systemd-fsck-root.service... Jul 11 00:34:27.818591 systemd-fsck[778]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 11 00:34:27.821660 systemd[1]: Finished systemd-fsck-root.service. Jul 11 00:34:27.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.825018 systemd[1]: Mounting sysroot.mount... Jul 11 00:34:27.832811 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 11 00:34:27.833285 systemd[1]: Mounted sysroot.mount. Jul 11 00:34:27.834061 systemd[1]: Reached target initrd-root-fs.target. Jul 11 00:34:27.836614 systemd[1]: Mounting sysroot-usr.mount... Jul 11 00:34:27.837518 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 11 00:34:27.837556 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 11 00:34:27.837578 systemd[1]: Reached target ignition-diskful.target. Jul 11 00:34:27.839296 systemd[1]: Mounted sysroot-usr.mount. Jul 11 00:34:27.841082 systemd[1]: Starting initrd-setup-root.service... Jul 11 00:34:27.845078 initrd-setup-root[788]: cut: /sysroot/etc/passwd: No such file or directory Jul 11 00:34:27.848233 initrd-setup-root[796]: cut: /sysroot/etc/group: No such file or directory Jul 11 00:34:27.851610 initrd-setup-root[804]: cut: /sysroot/etc/shadow: No such file or directory Jul 11 00:34:27.855340 initrd-setup-root[812]: cut: /sysroot/etc/gshadow: No such file or directory Jul 11 00:34:27.882412 systemd[1]: Finished initrd-setup-root.service. Jul 11 00:34:27.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.884031 systemd[1]: Starting ignition-mount.service... Jul 11 00:34:27.885362 systemd[1]: Starting sysroot-boot.service... Jul 11 00:34:27.889364 bash[829]: umount: /sysroot/usr/share/oem: not mounted. Jul 11 00:34:27.896776 ignition[831]: INFO : Ignition 2.14.0 Jul 11 00:34:27.896776 ignition[831]: INFO : Stage: mount Jul 11 00:34:27.898291 ignition[831]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:34:27.898291 ignition[831]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:34:27.901021 ignition[831]: INFO : mount: mount passed Jul 11 00:34:27.901021 ignition[831]: INFO : Ignition finished successfully Jul 11 00:34:27.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:27.900026 systemd[1]: Finished ignition-mount.service. Jul 11 00:34:27.905763 systemd[1]: Finished sysroot-boot.service. Jul 11 00:34:27.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:28.550077 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 11 00:34:28.555831 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (840) Jul 11 00:34:28.558223 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:34:28.558239 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:34:28.558248 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:34:28.560921 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 11 00:34:28.562446 systemd[1]: Starting ignition-files.service... Jul 11 00:34:28.575708 ignition[860]: INFO : Ignition 2.14.0 Jul 11 00:34:28.575708 ignition[860]: INFO : Stage: files Jul 11 00:34:28.577256 ignition[860]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:34:28.577256 ignition[860]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:34:28.577256 ignition[860]: DEBUG : files: compiled without relabeling support, skipping Jul 11 00:34:28.580583 ignition[860]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 11 00:34:28.580583 ignition[860]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 11 00:34:28.583256 ignition[860]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 11 00:34:28.583256 ignition[860]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 11 00:34:28.585871 ignition[860]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 11 00:34:28.585871 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 11 00:34:28.585871 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Jul 11 00:34:28.583556 unknown[860]: wrote ssh authorized keys file for user: core Jul 11 00:34:28.636881 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 11 00:34:28.950938 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 11 00:34:28.950938 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:34:28.954400 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Jul 11 00:34:29.360942 systemd-networkd[742]: eth0: Gained IPv6LL Jul 11 00:34:29.456797 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 11 00:34:30.002944 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:34:30.002944 ignition[860]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 11 00:34:30.006919 ignition[860]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:34:30.050323 ignition[860]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:34:30.052768 ignition[860]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 11 00:34:30.052768 ignition[860]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:34:30.052768 ignition[860]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:34:30.052768 ignition[860]: INFO : files: files passed Jul 11 00:34:30.052768 ignition[860]: INFO : Ignition finished successfully Jul 11 00:34:30.067990 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 11 00:34:30.068011 kernel: audit: type=1130 audit(1752194070.054:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.068027 kernel: audit: type=1130 audit(1752194070.063:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.052955 systemd[1]: Finished ignition-files.service. Jul 11 00:34:30.056236 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 11 00:34:30.061150 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 11 00:34:30.078345 kernel: audit: type=1130 audit(1752194070.070:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.078366 kernel: audit: type=1131 audit(1752194070.070:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.078429 initrd-setup-root-after-ignition[883]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 11 00:34:30.061828 systemd[1]: Starting ignition-quench.service... Jul 11 00:34:30.080734 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 11 00:34:30.063403 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 11 00:34:30.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.064959 systemd[1]: Reached target ignition-complete.target. Jul 11 00:34:30.090391 kernel: audit: type=1130 audit(1752194070.082:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.090415 kernel: audit: type=1131 audit(1752194070.082:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.069358 systemd[1]: Starting initrd-parse-etc.service... Jul 11 00:34:30.070216 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 11 00:34:30.070299 systemd[1]: Finished ignition-quench.service. Jul 11 00:34:30.081817 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 11 00:34:30.081911 systemd[1]: Finished initrd-parse-etc.service. Jul 11 00:34:30.083119 systemd[1]: Reached target initrd-fs.target. Jul 11 00:34:30.089666 systemd[1]: Reached target initrd.target. Jul 11 00:34:30.091078 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 11 00:34:30.091866 systemd[1]: Starting dracut-pre-pivot.service... Jul 11 00:34:30.103112 systemd[1]: Finished dracut-pre-pivot.service. Jul 11 00:34:30.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.104840 systemd[1]: Starting initrd-cleanup.service... Jul 11 00:34:30.108214 kernel: audit: type=1130 audit(1752194070.103:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.113309 systemd[1]: Stopped target nss-lookup.target. Jul 11 00:34:30.114208 systemd[1]: Stopped target remote-cryptsetup.target. Jul 11 00:34:30.115705 systemd[1]: Stopped target timers.target. Jul 11 00:34:30.117118 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 11 00:34:30.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.117227 systemd[1]: Stopped dracut-pre-pivot.service. Jul 11 00:34:30.122774 kernel: audit: type=1131 audit(1752194070.118:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.118508 systemd[1]: Stopped target initrd.target. Jul 11 00:34:30.122220 systemd[1]: Stopped target basic.target. Jul 11 00:34:30.123538 systemd[1]: Stopped target ignition-complete.target. Jul 11 00:34:30.124997 systemd[1]: Stopped target ignition-diskful.target. Jul 11 00:34:30.126390 systemd[1]: Stopped target initrd-root-device.target. Jul 11 00:34:30.127865 systemd[1]: Stopped target remote-fs.target. Jul 11 00:34:30.129267 systemd[1]: Stopped target remote-fs-pre.target. Jul 11 00:34:30.130700 systemd[1]: Stopped target sysinit.target. Jul 11 00:34:30.131994 systemd[1]: Stopped target local-fs.target. Jul 11 00:34:30.133364 systemd[1]: Stopped target local-fs-pre.target. Jul 11 00:34:30.134624 systemd[1]: Stopped target swap.target. Jul 11 00:34:30.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.139889 kernel: audit: type=1131 audit(1752194070.136:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.135776 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 11 00:34:30.135906 systemd[1]: Stopped dracut-pre-mount.service. Jul 11 00:34:30.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.137217 systemd[1]: Stopped target cryptsetup.target. Jul 11 00:34:30.146241 kernel: audit: type=1131 audit(1752194070.141:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.140585 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 11 00:34:30.140690 systemd[1]: Stopped dracut-initqueue.service. Jul 11 00:34:30.142157 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 11 00:34:30.142254 systemd[1]: Stopped ignition-fetch-offline.service. Jul 11 00:34:30.145745 systemd[1]: Stopped target paths.target. Jul 11 00:34:30.146918 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 11 00:34:30.149374 systemd[1]: Stopped systemd-ask-password-console.path. Jul 11 00:34:30.150325 systemd[1]: Stopped target slices.target. Jul 11 00:34:30.151645 systemd[1]: Stopped target sockets.target. Jul 11 00:34:30.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.152970 systemd[1]: iscsid.socket: Deactivated successfully. Jul 11 00:34:30.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.153041 systemd[1]: Closed iscsid.socket. Jul 11 00:34:30.154543 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 11 00:34:30.154607 systemd[1]: Closed iscsiuio.socket. Jul 11 00:34:30.155889 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 11 00:34:30.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.155984 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 11 00:34:30.157320 systemd[1]: ignition-files.service: Deactivated successfully. Jul 11 00:34:30.157409 systemd[1]: Stopped ignition-files.service. Jul 11 00:34:30.159379 systemd[1]: Stopping ignition-mount.service... Jul 11 00:34:30.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.168288 ignition[900]: INFO : Ignition 2.14.0 Jul 11 00:34:30.168288 ignition[900]: INFO : Stage: umount Jul 11 00:34:30.168288 ignition[900]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:34:30.168288 ignition[900]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:34:30.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.161045 systemd[1]: Stopping sysroot-boot.service... Jul 11 00:34:30.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.176890 ignition[900]: INFO : umount: umount passed Jul 11 00:34:30.176890 ignition[900]: INFO : Ignition finished successfully Jul 11 00:34:30.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.161699 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 11 00:34:30.161835 systemd[1]: Stopped systemd-udev-trigger.service. Jul 11 00:34:30.163046 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 11 00:34:30.163133 systemd[1]: Stopped dracut-pre-trigger.service. Jul 11 00:34:30.167641 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 11 00:34:30.167748 systemd[1]: Finished initrd-cleanup.service. Jul 11 00:34:30.170521 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 11 00:34:30.170913 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 11 00:34:30.170987 systemd[1]: Stopped ignition-mount.service. Jul 11 00:34:30.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.172642 systemd[1]: Stopped target network.target. Jul 11 00:34:30.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.175374 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 11 00:34:30.175432 systemd[1]: Stopped ignition-disks.service. Jul 11 00:34:30.176249 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 11 00:34:30.176288 systemd[1]: Stopped ignition-kargs.service. Jul 11 00:34:30.177653 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 11 00:34:30.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.177690 systemd[1]: Stopped ignition-setup.service. Jul 11 00:34:30.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.202000 audit: BPF prog-id=6 op=UNLOAD Jul 11 00:34:30.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.179131 systemd[1]: Stopping systemd-networkd.service... Jul 11 00:34:30.180632 systemd[1]: Stopping systemd-resolved.service... Jul 11 00:34:30.186824 systemd-networkd[742]: eth0: DHCPv6 lease lost Jul 11 00:34:30.188017 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 11 00:34:30.188112 systemd[1]: Stopped systemd-networkd.service. Jul 11 00:34:30.210000 audit: BPF prog-id=9 op=UNLOAD Jul 11 00:34:30.191264 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 11 00:34:30.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.191348 systemd[1]: Stopped systemd-resolved.service. Jul 11 00:34:30.192709 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 11 00:34:30.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.192737 systemd[1]: Closed systemd-networkd.socket. Jul 11 00:34:30.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.196089 systemd[1]: Stopping network-cleanup.service... Jul 11 00:34:30.198313 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 11 00:34:30.198370 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 11 00:34:30.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.199876 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 11 00:34:30.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.199919 systemd[1]: Stopped systemd-sysctl.service. Jul 11 00:34:30.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.202678 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 11 00:34:30.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.202720 systemd[1]: Stopped systemd-modules-load.service. Jul 11 00:34:30.203838 systemd[1]: Stopping systemd-udevd.service... Jul 11 00:34:30.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.208852 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 11 00:34:30.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.211550 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 11 00:34:30.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.211645 systemd[1]: Stopped network-cleanup.service. Jul 11 00:34:30.213762 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 11 00:34:30.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:30.213970 systemd[1]: Stopped systemd-udevd.service. Jul 11 00:34:30.215490 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 11 00:34:30.215564 systemd[1]: Stopped sysroot-boot.service. Jul 11 00:34:30.216744 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 11 00:34:30.216776 systemd[1]: Closed systemd-udevd-control.socket. Jul 11 00:34:30.217930 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 11 00:34:30.217958 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 11 00:34:30.219359 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 11 00:34:30.219398 systemd[1]: Stopped dracut-pre-udev.service. Jul 11 00:34:30.220926 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 11 00:34:30.220963 systemd[1]: Stopped dracut-cmdline.service. Jul 11 00:34:30.222527 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 11 00:34:30.222566 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 11 00:34:30.224041 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 11 00:34:30.224081 systemd[1]: Stopped initrd-setup-root.service. Jul 11 00:34:30.226069 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 11 00:34:30.226941 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 11 00:34:30.226992 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 11 00:34:30.229096 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 11 00:34:30.229135 systemd[1]: Stopped kmod-static-nodes.service. Jul 11 00:34:30.229967 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 11 00:34:30.230005 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 11 00:34:30.232396 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 11 00:34:30.232803 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 11 00:34:30.232879 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 11 00:34:30.234232 systemd[1]: Reached target initrd-switch-root.target. Jul 11 00:34:30.236249 systemd[1]: Starting initrd-switch-root.service... Jul 11 00:34:30.264000 systemd-journald[290]: Received SIGTERM from PID 1 (n/a). Jul 11 00:34:30.264034 iscsid[750]: iscsid shutting down. Jul 11 00:34:30.242612 systemd[1]: Switching root. Jul 11 00:34:30.265254 systemd-journald[290]: Journal stopped Jul 11 00:34:32.209084 kernel: SELinux: Class mctp_socket not defined in policy. Jul 11 00:34:32.209132 kernel: SELinux: Class anon_inode not defined in policy. Jul 11 00:34:32.209144 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 11 00:34:32.209156 kernel: SELinux: policy capability network_peer_controls=1 Jul 11 00:34:32.209165 kernel: SELinux: policy capability open_perms=1 Jul 11 00:34:32.209177 kernel: SELinux: policy capability extended_socket_class=1 Jul 11 00:34:32.209187 kernel: SELinux: policy capability always_check_network=0 Jul 11 00:34:32.209201 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 11 00:34:32.209211 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 11 00:34:32.209220 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 11 00:34:32.209229 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 11 00:34:32.209244 systemd[1]: Successfully loaded SELinux policy in 34.129ms. Jul 11 00:34:32.209260 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.831ms. Jul 11 00:34:32.209272 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:34:32.209285 systemd[1]: Detected virtualization kvm. Jul 11 00:34:32.209295 systemd[1]: Detected architecture arm64. Jul 11 00:34:32.209306 systemd[1]: Detected first boot. Jul 11 00:34:32.209316 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:34:32.209327 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 11 00:34:32.209337 systemd[1]: Populated /etc with preset unit settings. Jul 11 00:34:32.209347 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:34:32.209359 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:34:32.209375 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:34:32.209386 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 11 00:34:32.209397 systemd[1]: Stopped iscsiuio.service. Jul 11 00:34:32.209407 systemd[1]: iscsid.service: Deactivated successfully. Jul 11 00:34:32.209417 systemd[1]: Stopped iscsid.service. Jul 11 00:34:32.209435 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 11 00:34:32.209446 systemd[1]: Stopped initrd-switch-root.service. Jul 11 00:34:32.209460 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 11 00:34:32.209471 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 11 00:34:32.209483 systemd[1]: Created slice system-addon\x2drun.slice. Jul 11 00:34:32.209493 systemd[1]: Created slice system-getty.slice. Jul 11 00:34:32.209505 systemd[1]: Created slice system-modprobe.slice. Jul 11 00:34:32.209515 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 11 00:34:32.209525 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 11 00:34:32.209536 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 11 00:34:32.209546 systemd[1]: Created slice user.slice. Jul 11 00:34:32.209557 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:34:32.209568 systemd[1]: Started systemd-ask-password-wall.path. Jul 11 00:34:32.209579 systemd[1]: Set up automount boot.automount. Jul 11 00:34:32.209591 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 11 00:34:32.209602 systemd[1]: Stopped target initrd-switch-root.target. Jul 11 00:34:32.209612 systemd[1]: Stopped target initrd-fs.target. Jul 11 00:34:32.209622 systemd[1]: Stopped target initrd-root-fs.target. Jul 11 00:34:32.209633 systemd[1]: Reached target integritysetup.target. Jul 11 00:34:32.209643 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:34:32.209660 systemd[1]: Reached target remote-fs.target. Jul 11 00:34:32.209678 systemd[1]: Reached target slices.target. Jul 11 00:34:32.209690 systemd[1]: Reached target swap.target. Jul 11 00:34:32.209701 systemd[1]: Reached target torcx.target. Jul 11 00:34:32.209713 systemd[1]: Reached target veritysetup.target. Jul 11 00:34:32.209724 systemd[1]: Listening on systemd-coredump.socket. Jul 11 00:34:32.209734 systemd[1]: Listening on systemd-initctl.socket. Jul 11 00:34:32.209744 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:34:32.209755 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:34:32.209765 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:34:32.209775 systemd[1]: Listening on systemd-userdbd.socket. Jul 11 00:34:32.209786 systemd[1]: Mounting dev-hugepages.mount... Jul 11 00:34:32.209805 systemd[1]: Mounting dev-mqueue.mount... Jul 11 00:34:32.209818 systemd[1]: Mounting media.mount... Jul 11 00:34:32.209828 systemd[1]: Mounting sys-kernel-debug.mount... Jul 11 00:34:32.209838 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 11 00:34:32.209851 systemd[1]: Mounting tmp.mount... Jul 11 00:34:32.209861 systemd[1]: Starting flatcar-tmpfiles.service... Jul 11 00:34:32.209872 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:34:32.209882 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:34:32.209894 systemd[1]: Starting modprobe@configfs.service... Jul 11 00:34:32.209905 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:34:32.209916 systemd[1]: Starting modprobe@drm.service... Jul 11 00:34:32.209927 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:34:32.209937 systemd[1]: Starting modprobe@fuse.service... Jul 11 00:34:32.209947 systemd[1]: Starting modprobe@loop.service... Jul 11 00:34:32.209958 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 11 00:34:32.209968 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 11 00:34:32.209979 systemd[1]: Stopped systemd-fsck-root.service. Jul 11 00:34:32.209989 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 11 00:34:32.209999 kernel: loop: module loaded Jul 11 00:34:32.210012 systemd[1]: Stopped systemd-fsck-usr.service. Jul 11 00:34:32.210023 kernel: fuse: init (API version 7.34) Jul 11 00:34:32.210035 systemd[1]: Stopped systemd-journald.service. Jul 11 00:34:32.210045 systemd[1]: Starting systemd-journald.service... Jul 11 00:34:32.210055 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:34:32.210066 systemd[1]: Starting systemd-network-generator.service... Jul 11 00:34:32.210078 systemd[1]: Starting systemd-remount-fs.service... Jul 11 00:34:32.210089 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:34:32.210108 systemd[1]: verity-setup.service: Deactivated successfully. Jul 11 00:34:32.210146 systemd[1]: Stopped verity-setup.service. Jul 11 00:34:32.210157 systemd-journald[1006]: Journal started Jul 11 00:34:32.210198 systemd-journald[1006]: Runtime Journal (/run/log/journal/d98674c59d1c45da98d6624e6cdf2ac4) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:34:32.210227 systemd[1]: Mounted dev-hugepages.mount. Jul 11 00:34:30.318000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 11 00:34:30.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:34:30.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:34:30.400000 audit: BPF prog-id=10 op=LOAD Jul 11 00:34:30.400000 audit: BPF prog-id=10 op=UNLOAD Jul 11 00:34:30.400000 audit: BPF prog-id=11 op=LOAD Jul 11 00:34:30.400000 audit: BPF prog-id=11 op=UNLOAD Jul 11 00:34:30.437000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 11 00:34:30.437000 audit[933]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:30.437000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:34:30.439000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 11 00:34:30.439000 audit[933]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000118000 a2=1ed a3=0 items=2 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:30.439000 audit: CWD cwd="/" Jul 11 00:34:30.439000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:34:30.439000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:34:30.439000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:34:32.092000 audit: BPF prog-id=12 op=LOAD Jul 11 00:34:32.092000 audit: BPF prog-id=3 op=UNLOAD Jul 11 00:34:32.092000 audit: BPF prog-id=13 op=LOAD Jul 11 00:34:32.092000 audit: BPF prog-id=14 op=LOAD Jul 11 00:34:32.092000 audit: BPF prog-id=4 op=UNLOAD Jul 11 00:34:32.092000 audit: BPF prog-id=5 op=UNLOAD Jul 11 00:34:32.092000 audit: BPF prog-id=15 op=LOAD Jul 11 00:34:32.092000 audit: BPF prog-id=12 op=UNLOAD Jul 11 00:34:32.092000 audit: BPF prog-id=16 op=LOAD Jul 11 00:34:32.092000 audit: BPF prog-id=17 op=LOAD Jul 11 00:34:32.092000 audit: BPF prog-id=13 op=UNLOAD Jul 11 00:34:32.092000 audit: BPF prog-id=14 op=UNLOAD Jul 11 00:34:32.093000 audit: BPF prog-id=18 op=LOAD Jul 11 00:34:32.093000 audit: BPF prog-id=15 op=UNLOAD Jul 11 00:34:32.093000 audit: BPF prog-id=19 op=LOAD Jul 11 00:34:32.093000 audit: BPF prog-id=20 op=LOAD Jul 11 00:34:32.093000 audit: BPF prog-id=16 op=UNLOAD Jul 11 00:34:32.093000 audit: BPF prog-id=17 op=UNLOAD Jul 11 00:34:32.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.103000 audit: BPF prog-id=18 op=UNLOAD Jul 11 00:34:32.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.192000 audit: BPF prog-id=21 op=LOAD Jul 11 00:34:32.192000 audit: BPF prog-id=22 op=LOAD Jul 11 00:34:32.192000 audit: BPF prog-id=23 op=LOAD Jul 11 00:34:32.192000 audit: BPF prog-id=19 op=UNLOAD Jul 11 00:34:32.192000 audit: BPF prog-id=20 op=UNLOAD Jul 11 00:34:32.206000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 11 00:34:32.206000 audit[1006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffee539900 a2=4000 a3=1 items=0 ppid=1 pid=1006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:32.206000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 11 00:34:32.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.090719 systemd[1]: Queued start job for default target multi-user.target. Jul 11 00:34:30.436776 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:34:32.090730 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 11 00:34:30.437066 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:34:32.094664 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 11 00:34:30.437085 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:34:30.437113 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 11 00:34:30.437122 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 11 00:34:30.437149 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 11 00:34:30.437161 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 11 00:34:30.437356 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 11 00:34:30.437389 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:34:30.437401 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:34:30.438096 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 11 00:34:30.438130 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 11 00:34:30.438148 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 11 00:34:30.438162 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 11 00:34:30.438178 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 11 00:34:30.438192 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:30Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 11 00:34:31.854439 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:34:31.854705 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:34:31.854816 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:34:31.854986 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:34:31.855035 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 11 00:34:31.855092 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-11T00:34:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 11 00:34:32.213278 systemd[1]: Started systemd-journald.service. Jul 11 00:34:32.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.213871 systemd[1]: Mounted dev-mqueue.mount. Jul 11 00:34:32.214632 systemd[1]: Mounted media.mount. Jul 11 00:34:32.215405 systemd[1]: Mounted sys-kernel-debug.mount. Jul 11 00:34:32.216274 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 11 00:34:32.217135 systemd[1]: Mounted tmp.mount. Jul 11 00:34:32.218024 systemd[1]: Finished flatcar-tmpfiles.service. Jul 11 00:34:32.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.219091 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:34:32.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.220094 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 11 00:34:32.220253 systemd[1]: Finished modprobe@configfs.service. Jul 11 00:34:32.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.221321 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:34:32.221508 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:34:32.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.222570 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:34:32.222734 systemd[1]: Finished modprobe@drm.service. Jul 11 00:34:32.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.223737 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:34:32.223896 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:34:32.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.224976 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 11 00:34:32.225118 systemd[1]: Finished modprobe@fuse.service. Jul 11 00:34:32.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.226136 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:34:32.226255 systemd[1]: Finished modprobe@loop.service. Jul 11 00:34:32.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.227317 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:34:32.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.228438 systemd[1]: Finished systemd-network-generator.service. Jul 11 00:34:32.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.229614 systemd[1]: Finished systemd-remount-fs.service. Jul 11 00:34:32.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.231069 systemd[1]: Reached target network-pre.target. Jul 11 00:34:32.232938 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 11 00:34:32.234672 systemd[1]: Mounting sys-kernel-config.mount... Jul 11 00:34:32.235586 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 11 00:34:32.237255 systemd[1]: Starting systemd-hwdb-update.service... Jul 11 00:34:32.239098 systemd[1]: Starting systemd-journal-flush.service... Jul 11 00:34:32.239902 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:34:32.240881 systemd[1]: Starting systemd-random-seed.service... Jul 11 00:34:32.241695 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:34:32.242719 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:34:32.243460 systemd-journald[1006]: Time spent on flushing to /var/log/journal/d98674c59d1c45da98d6624e6cdf2ac4 is 17.064ms for 998 entries. Jul 11 00:34:32.243460 systemd-journald[1006]: System Journal (/var/log/journal/d98674c59d1c45da98d6624e6cdf2ac4) is 8.0M, max 195.6M, 187.6M free. Jul 11 00:34:32.275286 systemd-journald[1006]: Received client request to flush runtime journal. Jul 11 00:34:32.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.245521 systemd[1]: Starting systemd-sysusers.service... Jul 11 00:34:32.248171 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 11 00:34:32.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.249171 systemd[1]: Mounted sys-kernel-config.mount. Jul 11 00:34:32.251438 systemd[1]: Finished systemd-random-seed.service. Jul 11 00:34:32.277743 udevadm[1036]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 11 00:34:32.252490 systemd[1]: Reached target first-boot-complete.target. Jul 11 00:34:32.259032 systemd[1]: Finished systemd-sysusers.service. Jul 11 00:34:32.260862 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 11 00:34:32.264038 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:34:32.265884 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:34:32.267612 systemd[1]: Starting systemd-udev-settle.service... Jul 11 00:34:32.276124 systemd[1]: Finished systemd-journal-flush.service. Jul 11 00:34:32.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.281959 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 11 00:34:32.590609 systemd[1]: Finished systemd-hwdb-update.service. Jul 11 00:34:32.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.591000 audit: BPF prog-id=24 op=LOAD Jul 11 00:34:32.591000 audit: BPF prog-id=25 op=LOAD Jul 11 00:34:32.591000 audit: BPF prog-id=7 op=UNLOAD Jul 11 00:34:32.591000 audit: BPF prog-id=8 op=UNLOAD Jul 11 00:34:32.592844 systemd[1]: Starting systemd-udevd.service... Jul 11 00:34:32.614676 systemd-udevd[1038]: Using default interface naming scheme 'v252'. Jul 11 00:34:32.625582 systemd[1]: Started systemd-udevd.service. Jul 11 00:34:32.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.626000 audit: BPF prog-id=26 op=LOAD Jul 11 00:34:32.628162 systemd[1]: Starting systemd-networkd.service... Jul 11 00:34:32.634000 audit: BPF prog-id=27 op=LOAD Jul 11 00:34:32.634000 audit: BPF prog-id=28 op=LOAD Jul 11 00:34:32.634000 audit: BPF prog-id=29 op=LOAD Jul 11 00:34:32.635493 systemd[1]: Starting systemd-userdbd.service... Jul 11 00:34:32.660526 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 11 00:34:32.667169 systemd[1]: Started systemd-userdbd.service. Jul 11 00:34:32.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.676498 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:34:32.708174 systemd-networkd[1047]: lo: Link UP Jul 11 00:34:32.708186 systemd-networkd[1047]: lo: Gained carrier Jul 11 00:34:32.708556 systemd-networkd[1047]: Enumeration completed Jul 11 00:34:32.708644 systemd[1]: Started systemd-networkd.service. Jul 11 00:34:32.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.709781 systemd-networkd[1047]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:34:32.712714 systemd-networkd[1047]: eth0: Link UP Jul 11 00:34:32.712724 systemd-networkd[1047]: eth0: Gained carrier Jul 11 00:34:32.742911 systemd-networkd[1047]: eth0: DHCPv4 address 10.0.0.93/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:34:32.750196 systemd[1]: Finished systemd-udev-settle.service. Jul 11 00:34:32.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.752194 systemd[1]: Starting lvm2-activation-early.service... Jul 11 00:34:32.761906 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:34:32.788493 systemd[1]: Finished lvm2-activation-early.service. Jul 11 00:34:32.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.789495 systemd[1]: Reached target cryptsetup.target. Jul 11 00:34:32.791346 systemd[1]: Starting lvm2-activation.service... Jul 11 00:34:32.794948 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:34:32.822541 systemd[1]: Finished lvm2-activation.service. Jul 11 00:34:32.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.823467 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:34:32.824299 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 11 00:34:32.824325 systemd[1]: Reached target local-fs.target. Jul 11 00:34:32.825079 systemd[1]: Reached target machines.target. Jul 11 00:34:32.826899 systemd[1]: Starting ldconfig.service... Jul 11 00:34:32.827872 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:34:32.827921 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:32.828936 systemd[1]: Starting systemd-boot-update.service... Jul 11 00:34:32.830733 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 11 00:34:32.833047 systemd[1]: Starting systemd-machine-id-commit.service... Jul 11 00:34:32.838653 systemd[1]: Starting systemd-sysext.service... Jul 11 00:34:32.840098 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1074 (bootctl) Jul 11 00:34:32.844329 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 11 00:34:32.845676 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 11 00:34:32.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.852148 systemd[1]: Unmounting usr-share-oem.mount... Jul 11 00:34:32.855560 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 11 00:34:32.855742 systemd[1]: Unmounted usr-share-oem.mount. Jul 11 00:34:32.869815 kernel: loop0: detected capacity change from 0 to 211168 Jul 11 00:34:32.912625 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 11 00:34:32.913283 systemd[1]: Finished systemd-machine-id-commit.service. Jul 11 00:34:32.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.921819 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 11 00:34:32.930352 systemd-fsck[1083]: fsck.fat 4.2 (2021-01-31) Jul 11 00:34:32.930352 systemd-fsck[1083]: /dev/vda1: 236 files, 117310/258078 clusters Jul 11 00:34:32.935637 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 11 00:34:32.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.938374 systemd[1]: Mounting boot.mount... Jul 11 00:34:32.941818 kernel: loop1: detected capacity change from 0 to 211168 Jul 11 00:34:32.946240 (sd-sysext)[1088]: Using extensions 'kubernetes'. Jul 11 00:34:32.946985 (sd-sysext)[1088]: Merged extensions into '/usr'. Jul 11 00:34:32.954060 systemd[1]: Mounted boot.mount. Jul 11 00:34:32.963718 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:34:32.964973 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:34:32.966890 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:34:32.968841 systemd[1]: Starting modprobe@loop.service... Jul 11 00:34:32.969858 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:34:32.969979 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:32.970836 systemd[1]: Finished systemd-boot-update.service. Jul 11 00:34:32.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.972209 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:34:32.972313 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:34:32.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.973614 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:34:32.973716 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:34:32.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.975205 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:34:32.975306 systemd[1]: Finished modprobe@loop.service. Jul 11 00:34:32.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:32.976668 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:34:32.976763 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.015531 ldconfig[1073]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 11 00:34:33.018662 systemd[1]: Finished ldconfig.service. Jul 11 00:34:33.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.210739 systemd[1]: Mounting usr-share-oem.mount... Jul 11 00:34:33.215694 systemd[1]: Mounted usr-share-oem.mount. Jul 11 00:34:33.217468 systemd[1]: Finished systemd-sysext.service. Jul 11 00:34:33.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.219390 systemd[1]: Starting ensure-sysext.service... Jul 11 00:34:33.221040 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 11 00:34:33.225266 systemd[1]: Reloading. Jul 11 00:34:33.229916 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 11 00:34:33.230850 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 11 00:34:33.232225 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 11 00:34:33.259000 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-07-11T00:34:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:34:33.259028 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-07-11T00:34:33Z" level=info msg="torcx already run" Jul 11 00:34:33.317768 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:34:33.317785 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:34:33.332970 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:34:33.374000 audit: BPF prog-id=30 op=LOAD Jul 11 00:34:33.374000 audit: BPF prog-id=21 op=UNLOAD Jul 11 00:34:33.374000 audit: BPF prog-id=31 op=LOAD Jul 11 00:34:33.374000 audit: BPF prog-id=32 op=LOAD Jul 11 00:34:33.374000 audit: BPF prog-id=22 op=UNLOAD Jul 11 00:34:33.374000 audit: BPF prog-id=23 op=UNLOAD Jul 11 00:34:33.374000 audit: BPF prog-id=33 op=LOAD Jul 11 00:34:33.374000 audit: BPF prog-id=26 op=UNLOAD Jul 11 00:34:33.375000 audit: BPF prog-id=34 op=LOAD Jul 11 00:34:33.375000 audit: BPF prog-id=27 op=UNLOAD Jul 11 00:34:33.375000 audit: BPF prog-id=35 op=LOAD Jul 11 00:34:33.375000 audit: BPF prog-id=36 op=LOAD Jul 11 00:34:33.375000 audit: BPF prog-id=28 op=UNLOAD Jul 11 00:34:33.375000 audit: BPF prog-id=29 op=UNLOAD Jul 11 00:34:33.376000 audit: BPF prog-id=37 op=LOAD Jul 11 00:34:33.376000 audit: BPF prog-id=38 op=LOAD Jul 11 00:34:33.376000 audit: BPF prog-id=24 op=UNLOAD Jul 11 00:34:33.376000 audit: BPF prog-id=25 op=UNLOAD Jul 11 00:34:33.379547 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 11 00:34:33.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.383970 systemd[1]: Starting audit-rules.service... Jul 11 00:34:33.385712 systemd[1]: Starting clean-ca-certificates.service... Jul 11 00:34:33.387881 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 11 00:34:33.388000 audit: BPF prog-id=39 op=LOAD Jul 11 00:34:33.390385 systemd[1]: Starting systemd-resolved.service... Jul 11 00:34:33.392000 audit: BPF prog-id=40 op=LOAD Jul 11 00:34:33.394116 systemd[1]: Starting systemd-timesyncd.service... Jul 11 00:34:33.395917 systemd[1]: Starting systemd-update-utmp.service... Jul 11 00:34:33.399000 audit[1164]: SYSTEM_BOOT pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.403511 systemd[1]: Finished clean-ca-certificates.service. Jul 11 00:34:33.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.404858 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.406061 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:34:33.408057 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:34:33.409924 systemd[1]: Starting modprobe@loop.service... Jul 11 00:34:33.410683 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.410836 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:33.410950 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:34:33.411760 systemd[1]: Finished systemd-update-utmp.service. Jul 11 00:34:33.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.413067 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:34:33.413180 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:34:33.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.414404 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:34:33.414525 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:34:33.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.415874 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:34:33.415983 systemd[1]: Finished modprobe@loop.service. Jul 11 00:34:33.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.418939 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.420232 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:34:33.422260 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:34:33.424209 systemd[1]: Starting modprobe@loop.service... Jul 11 00:34:33.425112 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.425246 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:33.425335 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:34:33.426158 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 11 00:34:33.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.427551 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:34:33.427657 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:34:33.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.428888 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:34:33.428995 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:34:33.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.430340 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:34:33.430460 systemd[1]: Finished modprobe@loop.service. Jul 11 00:34:33.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:33.431704 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:34:33.431900 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.433653 systemd[1]: Starting systemd-update-done.service... Jul 11 00:34:33.436974 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.438156 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:34:33.440017 systemd[1]: Starting modprobe@drm.service... Jul 11 00:34:33.440000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 11 00:34:33.440000 audit[1179]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd598cda0 a2=420 a3=0 items=0 ppid=1153 pid=1179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:33.440000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 11 00:34:33.441354 augenrules[1179]: No rules Jul 11 00:34:33.441871 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:34:33.443725 systemd[1]: Starting modprobe@loop.service... Jul 11 00:34:33.444663 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.444871 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:33.446232 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 11 00:34:33.447248 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:34:33.448469 systemd[1]: Finished audit-rules.service. Jul 11 00:34:33.449647 systemd[1]: Finished systemd-update-done.service. Jul 11 00:34:33.450961 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:34:33.451082 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:34:33.452262 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:34:33.452376 systemd[1]: Finished modprobe@drm.service. Jul 11 00:34:33.453534 systemd[1]: Started systemd-timesyncd.service. Jul 11 00:34:33.453975 systemd-timesyncd[1163]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 11 00:34:33.454032 systemd-timesyncd[1163]: Initial clock synchronization to Fri 2025-07-11 00:34:33.135025 UTC. Jul 11 00:34:33.455172 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:34:33.455283 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:34:33.456640 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:34:33.456750 systemd[1]: Finished modprobe@loop.service. Jul 11 00:34:33.458231 systemd[1]: Reached target time-set.target. Jul 11 00:34:33.459031 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:34:33.459068 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.459365 systemd[1]: Finished ensure-sysext.service. Jul 11 00:34:33.461751 systemd-resolved[1157]: Positive Trust Anchors: Jul 11 00:34:33.462006 systemd-resolved[1157]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:34:33.462078 systemd-resolved[1157]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:34:33.480914 systemd-resolved[1157]: Defaulting to hostname 'linux'. Jul 11 00:34:33.482433 systemd[1]: Started systemd-resolved.service. Jul 11 00:34:33.483290 systemd[1]: Reached target network.target. Jul 11 00:34:33.484061 systemd[1]: Reached target nss-lookup.target. Jul 11 00:34:33.484865 systemd[1]: Reached target sysinit.target. Jul 11 00:34:33.485665 systemd[1]: Started motdgen.path. Jul 11 00:34:33.486368 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 11 00:34:33.487596 systemd[1]: Started logrotate.timer. Jul 11 00:34:33.488403 systemd[1]: Started mdadm.timer. Jul 11 00:34:33.489094 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 11 00:34:33.489922 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 11 00:34:33.489953 systemd[1]: Reached target paths.target. Jul 11 00:34:33.490639 systemd[1]: Reached target timers.target. Jul 11 00:34:33.491763 systemd[1]: Listening on dbus.socket. Jul 11 00:34:33.493537 systemd[1]: Starting docker.socket... Jul 11 00:34:33.496537 systemd[1]: Listening on sshd.socket. Jul 11 00:34:33.497358 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:33.497845 systemd[1]: Listening on docker.socket. Jul 11 00:34:33.498695 systemd[1]: Reached target sockets.target. Jul 11 00:34:33.499491 systemd[1]: Reached target basic.target. Jul 11 00:34:33.500252 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.500282 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:34:33.501242 systemd[1]: Starting containerd.service... Jul 11 00:34:33.502965 systemd[1]: Starting dbus.service... Jul 11 00:34:33.504537 systemd[1]: Starting enable-oem-cloudinit.service... Jul 11 00:34:33.506472 systemd[1]: Starting extend-filesystems.service... Jul 11 00:34:33.507375 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 11 00:34:33.508861 systemd[1]: Starting motdgen.service... Jul 11 00:34:33.512149 systemd[1]: Starting prepare-helm.service... Jul 11 00:34:33.514510 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 11 00:34:33.514938 jq[1195]: false Jul 11 00:34:33.516430 systemd[1]: Starting sshd-keygen.service... Jul 11 00:34:33.519385 systemd[1]: Starting systemd-logind.service... Jul 11 00:34:33.520127 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:34:33.520195 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 11 00:34:33.520583 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 11 00:34:33.521219 systemd[1]: Starting update-engine.service... Jul 11 00:34:33.522958 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 11 00:34:33.526538 jq[1213]: true Jul 11 00:34:33.527499 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 11 00:34:33.527674 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 11 00:34:33.528846 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 11 00:34:33.529014 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 11 00:34:33.535774 jq[1217]: true Jul 11 00:34:33.539909 systemd[1]: motdgen.service: Deactivated successfully. Jul 11 00:34:33.540151 systemd[1]: Finished motdgen.service. Jul 11 00:34:33.541728 tar[1216]: linux-arm64/LICENSE Jul 11 00:34:33.541973 tar[1216]: linux-arm64/helm Jul 11 00:34:33.543359 dbus-daemon[1194]: [system] SELinux support is enabled Jul 11 00:34:33.543745 systemd[1]: Started dbus.service. Jul 11 00:34:33.546487 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 11 00:34:33.546516 systemd[1]: Reached target system-config.target. Jul 11 00:34:33.547417 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 11 00:34:33.547449 systemd[1]: Reached target user-config.target. Jul 11 00:34:33.553434 extend-filesystems[1196]: Found loop1 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda1 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda2 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda3 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found usr Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda4 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda6 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda7 Jul 11 00:34:33.554678 extend-filesystems[1196]: Found vda9 Jul 11 00:34:33.554678 extend-filesystems[1196]: Checking size of /dev/vda9 Jul 11 00:34:33.587652 extend-filesystems[1196]: Resized partition /dev/vda9 Jul 11 00:34:33.594766 extend-filesystems[1245]: resize2fs 1.46.5 (30-Dec-2021) Jul 11 00:34:33.599806 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 11 00:34:33.623591 update_engine[1208]: I0711 00:34:33.623255 1208 main.cc:92] Flatcar Update Engine starting Jul 11 00:34:33.633212 update_engine[1208]: I0711 00:34:33.629146 1208 update_check_scheduler.cc:74] Next update check in 7m0s Jul 11 00:34:33.629190 systemd[1]: Started update-engine.service. Jul 11 00:34:33.632226 systemd[1]: Started locksmithd.service. Jul 11 00:34:33.635100 systemd-logind[1205]: Watching system buttons on /dev/input/event0 (Power Button) Jul 11 00:34:33.635272 systemd-logind[1205]: New seat seat0. Jul 11 00:34:33.637949 systemd[1]: Started systemd-logind.service. Jul 11 00:34:33.642813 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 11 00:34:33.657914 extend-filesystems[1245]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 11 00:34:33.657914 extend-filesystems[1245]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 11 00:34:33.657914 extend-filesystems[1245]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 11 00:34:33.662498 extend-filesystems[1196]: Resized filesystem in /dev/vda9 Jul 11 00:34:33.658509 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 11 00:34:33.664452 bash[1241]: Updated "/home/core/.ssh/authorized_keys" Jul 11 00:34:33.658669 systemd[1]: Finished extend-filesystems.service. Jul 11 00:34:33.664534 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 11 00:34:33.681809 env[1218]: time="2025-07-11T00:34:33.678099280Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 11 00:34:33.697481 locksmithd[1247]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 11 00:34:33.698097 env[1218]: time="2025-07-11T00:34:33.698065200Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 11 00:34:33.698282 env[1218]: time="2025-07-11T00:34:33.698263160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:34:33.699648 env[1218]: time="2025-07-11T00:34:33.699615680Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:34:33.699729 env[1218]: time="2025-07-11T00:34:33.699714320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:34:33.700018 env[1218]: time="2025-07-11T00:34:33.699991640Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:34:33.700094 env[1218]: time="2025-07-11T00:34:33.700079480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 11 00:34:33.700150 env[1218]: time="2025-07-11T00:34:33.700135760Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 11 00:34:33.700198 env[1218]: time="2025-07-11T00:34:33.700185200Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 11 00:34:33.700324 env[1218]: time="2025-07-11T00:34:33.700307040Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:34:33.700706 env[1218]: time="2025-07-11T00:34:33.700680280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:34:33.700942 env[1218]: time="2025-07-11T00:34:33.700919200Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:34:33.701011 env[1218]: time="2025-07-11T00:34:33.700996760Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 11 00:34:33.701122 env[1218]: time="2025-07-11T00:34:33.701103120Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 11 00:34:33.701195 env[1218]: time="2025-07-11T00:34:33.701181480Z" level=info msg="metadata content store policy set" policy=shared Jul 11 00:34:33.704251 env[1218]: time="2025-07-11T00:34:33.704225440Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 11 00:34:33.704351 env[1218]: time="2025-07-11T00:34:33.704334600Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 11 00:34:33.704439 env[1218]: time="2025-07-11T00:34:33.704413760Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 11 00:34:33.704522 env[1218]: time="2025-07-11T00:34:33.704506720Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.704581 env[1218]: time="2025-07-11T00:34:33.704567640Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.704644 env[1218]: time="2025-07-11T00:34:33.704631600Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.704699 env[1218]: time="2025-07-11T00:34:33.704686600Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.705101 env[1218]: time="2025-07-11T00:34:33.705070720Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.705189 env[1218]: time="2025-07-11T00:34:33.705171920Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.705248 env[1218]: time="2025-07-11T00:34:33.705235360Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.705305 env[1218]: time="2025-07-11T00:34:33.705291560Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.705381 env[1218]: time="2025-07-11T00:34:33.705366720Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 11 00:34:33.705554 env[1218]: time="2025-07-11T00:34:33.705533440Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 11 00:34:33.705714 env[1218]: time="2025-07-11T00:34:33.705696040Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 11 00:34:33.706044 env[1218]: time="2025-07-11T00:34:33.706020000Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 11 00:34:33.706134 env[1218]: time="2025-07-11T00:34:33.706119320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706208 env[1218]: time="2025-07-11T00:34:33.706193560Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 11 00:34:33.706364 env[1218]: time="2025-07-11T00:34:33.706349760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706430 env[1218]: time="2025-07-11T00:34:33.706408320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706495 env[1218]: time="2025-07-11T00:34:33.706482320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706551 env[1218]: time="2025-07-11T00:34:33.706537680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706615 env[1218]: time="2025-07-11T00:34:33.706595800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706675 env[1218]: time="2025-07-11T00:34:33.706661600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706735 env[1218]: time="2025-07-11T00:34:33.706723080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706814 env[1218]: time="2025-07-11T00:34:33.706779640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.706898 env[1218]: time="2025-07-11T00:34:33.706882680Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 11 00:34:33.707067 env[1218]: time="2025-07-11T00:34:33.707048080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.707145 env[1218]: time="2025-07-11T00:34:33.707130240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.707201 env[1218]: time="2025-07-11T00:34:33.707188720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.707253 env[1218]: time="2025-07-11T00:34:33.707240800Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 11 00:34:33.707312 env[1218]: time="2025-07-11T00:34:33.707295440Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 11 00:34:33.707363 env[1218]: time="2025-07-11T00:34:33.707349600Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 11 00:34:33.707436 env[1218]: time="2025-07-11T00:34:33.707409400Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 11 00:34:33.707535 env[1218]: time="2025-07-11T00:34:33.707519440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 11 00:34:33.707831 env[1218]: time="2025-07-11T00:34:33.707763160Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 11 00:34:33.710198 env[1218]: time="2025-07-11T00:34:33.708167240Z" level=info msg="Connect containerd service" Jul 11 00:34:33.710198 env[1218]: time="2025-07-11T00:34:33.708205160Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 11 00:34:33.710884 env[1218]: time="2025-07-11T00:34:33.710854800Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:34:33.711181 env[1218]: time="2025-07-11T00:34:33.711135960Z" level=info msg="Start subscribing containerd event" Jul 11 00:34:33.711235 env[1218]: time="2025-07-11T00:34:33.711187320Z" level=info msg="Start recovering state" Jul 11 00:34:33.711259 env[1218]: time="2025-07-11T00:34:33.711249320Z" level=info msg="Start event monitor" Jul 11 00:34:33.711283 env[1218]: time="2025-07-11T00:34:33.711268240Z" level=info msg="Start snapshots syncer" Jul 11 00:34:33.711283 env[1218]: time="2025-07-11T00:34:33.711278760Z" level=info msg="Start cni network conf syncer for default" Jul 11 00:34:33.711321 env[1218]: time="2025-07-11T00:34:33.711286160Z" level=info msg="Start streaming server" Jul 11 00:34:33.711485 env[1218]: time="2025-07-11T00:34:33.711464280Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 11 00:34:33.711586 env[1218]: time="2025-07-11T00:34:33.711572800Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 11 00:34:33.711697 env[1218]: time="2025-07-11T00:34:33.711684360Z" level=info msg="containerd successfully booted in 0.037675s" Jul 11 00:34:33.711754 systemd[1]: Started containerd.service. Jul 11 00:34:33.981760 tar[1216]: linux-arm64/README.md Jul 11 00:34:33.986040 systemd[1]: Finished prepare-helm.service. Jul 11 00:34:34.737021 systemd-networkd[1047]: eth0: Gained IPv6LL Jul 11 00:34:34.738588 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 11 00:34:34.739829 systemd[1]: Reached target network-online.target. Jul 11 00:34:34.742309 systemd[1]: Starting kubelet.service... Jul 11 00:34:35.215982 sshd_keygen[1214]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 11 00:34:35.232319 systemd[1]: Finished sshd-keygen.service. Jul 11 00:34:35.234506 systemd[1]: Starting issuegen.service... Jul 11 00:34:35.239007 systemd[1]: issuegen.service: Deactivated successfully. Jul 11 00:34:35.239145 systemd[1]: Finished issuegen.service. Jul 11 00:34:35.241108 systemd[1]: Starting systemd-user-sessions.service... Jul 11 00:34:35.246702 systemd[1]: Finished systemd-user-sessions.service. Jul 11 00:34:35.248779 systemd[1]: Started getty@tty1.service. Jul 11 00:34:35.250692 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 11 00:34:35.251736 systemd[1]: Reached target getty.target. Jul 11 00:34:35.313057 systemd[1]: Started kubelet.service. Jul 11 00:34:35.314191 systemd[1]: Reached target multi-user.target. Jul 11 00:34:35.316449 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 11 00:34:35.322556 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 11 00:34:35.322693 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 11 00:34:35.323750 systemd[1]: Startup finished in 593ms (kernel) + 4.711s (initrd) + 5.041s (userspace) = 10.345s. Jul 11 00:34:35.734050 kubelet[1274]: E0711 00:34:35.733998 1274 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:34:35.735913 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:34:35.736038 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:34:38.338012 systemd[1]: Created slice system-sshd.slice. Jul 11 00:34:38.339090 systemd[1]: Started sshd@0-10.0.0.93:22-10.0.0.1:41228.service. Jul 11 00:34:38.386485 sshd[1284]: Accepted publickey for core from 10.0.0.1 port 41228 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:38.390172 sshd[1284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.399362 systemd[1]: Created slice user-500.slice. Jul 11 00:34:38.400373 systemd[1]: Starting user-runtime-dir@500.service... Jul 11 00:34:38.402042 systemd-logind[1205]: New session 1 of user core. Jul 11 00:34:38.407666 systemd[1]: Finished user-runtime-dir@500.service. Jul 11 00:34:38.408869 systemd[1]: Starting user@500.service... Jul 11 00:34:38.411335 (systemd)[1287]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.467067 systemd[1287]: Queued start job for default target default.target. Jul 11 00:34:38.467507 systemd[1287]: Reached target paths.target. Jul 11 00:34:38.467539 systemd[1287]: Reached target sockets.target. Jul 11 00:34:38.467550 systemd[1287]: Reached target timers.target. Jul 11 00:34:38.467571 systemd[1287]: Reached target basic.target. Jul 11 00:34:38.467618 systemd[1287]: Reached target default.target. Jul 11 00:34:38.467643 systemd[1287]: Startup finished in 51ms. Jul 11 00:34:38.467693 systemd[1]: Started user@500.service. Jul 11 00:34:38.468609 systemd[1]: Started session-1.scope. Jul 11 00:34:38.518012 systemd[1]: Started sshd@1-10.0.0.93:22-10.0.0.1:41242.service. Jul 11 00:34:38.569589 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 41242 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:38.570763 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.574462 systemd-logind[1205]: New session 2 of user core. Jul 11 00:34:38.575205 systemd[1]: Started session-2.scope. Jul 11 00:34:38.627517 sshd[1296]: pam_unix(sshd:session): session closed for user core Jul 11 00:34:38.631312 systemd[1]: Started sshd@2-10.0.0.93:22-10.0.0.1:41258.service. Jul 11 00:34:38.632047 systemd[1]: sshd@1-10.0.0.93:22-10.0.0.1:41242.service: Deactivated successfully. Jul 11 00:34:38.632627 systemd[1]: session-2.scope: Deactivated successfully. Jul 11 00:34:38.633117 systemd-logind[1205]: Session 2 logged out. Waiting for processes to exit. Jul 11 00:34:38.633699 systemd-logind[1205]: Removed session 2. Jul 11 00:34:38.668750 sshd[1301]: Accepted publickey for core from 10.0.0.1 port 41258 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:38.669888 sshd[1301]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.673677 systemd[1]: Started session-3.scope. Jul 11 00:34:38.673835 systemd-logind[1205]: New session 3 of user core. Jul 11 00:34:38.722209 sshd[1301]: pam_unix(sshd:session): session closed for user core Jul 11 00:34:38.724996 systemd[1]: sshd@2-10.0.0.93:22-10.0.0.1:41258.service: Deactivated successfully. Jul 11 00:34:38.725529 systemd[1]: session-3.scope: Deactivated successfully. Jul 11 00:34:38.725976 systemd-logind[1205]: Session 3 logged out. Waiting for processes to exit. Jul 11 00:34:38.726923 systemd[1]: Started sshd@3-10.0.0.93:22-10.0.0.1:41262.service. Jul 11 00:34:38.727593 systemd-logind[1205]: Removed session 3. Jul 11 00:34:38.764877 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 41262 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:38.765887 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.768701 systemd-logind[1205]: New session 4 of user core. Jul 11 00:34:38.769544 systemd[1]: Started session-4.scope. Jul 11 00:34:38.825812 sshd[1308]: pam_unix(sshd:session): session closed for user core Jul 11 00:34:38.828481 systemd[1]: sshd@3-10.0.0.93:22-10.0.0.1:41262.service: Deactivated successfully. Jul 11 00:34:38.829051 systemd[1]: session-4.scope: Deactivated successfully. Jul 11 00:34:38.830553 systemd[1]: Started sshd@4-10.0.0.93:22-10.0.0.1:41278.service. Jul 11 00:34:38.830840 systemd-logind[1205]: Session 4 logged out. Waiting for processes to exit. Jul 11 00:34:38.834203 systemd-logind[1205]: Removed session 4. Jul 11 00:34:38.867830 sshd[1314]: Accepted publickey for core from 10.0.0.1 port 41278 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:38.868837 sshd[1314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.872584 systemd[1]: Started session-5.scope. Jul 11 00:34:38.873101 systemd-logind[1205]: New session 5 of user core. Jul 11 00:34:38.931628 sudo[1317]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 11 00:34:38.932457 sudo[1317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:34:38.944937 dbus-daemon[1194]: avc: received setenforce notice (enforcing=1) Jul 11 00:34:38.945755 sudo[1317]: pam_unix(sudo:session): session closed for user root Jul 11 00:34:38.948286 sshd[1314]: pam_unix(sshd:session): session closed for user core Jul 11 00:34:38.952444 systemd[1]: Started sshd@5-10.0.0.93:22-10.0.0.1:41284.service. Jul 11 00:34:38.953062 systemd[1]: sshd@4-10.0.0.93:22-10.0.0.1:41278.service: Deactivated successfully. Jul 11 00:34:38.954065 systemd-logind[1205]: Session 5 logged out. Waiting for processes to exit. Jul 11 00:34:38.954107 systemd[1]: session-5.scope: Deactivated successfully. Jul 11 00:34:38.954819 systemd-logind[1205]: Removed session 5. Jul 11 00:34:38.991392 sshd[1320]: Accepted publickey for core from 10.0.0.1 port 41284 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:38.992862 sshd[1320]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:38.995969 systemd-logind[1205]: New session 6 of user core. Jul 11 00:34:38.996719 systemd[1]: Started session-6.scope. Jul 11 00:34:39.047123 sudo[1325]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 11 00:34:39.047331 sudo[1325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:34:39.049796 sudo[1325]: pam_unix(sudo:session): session closed for user root Jul 11 00:34:39.053865 sudo[1324]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 11 00:34:39.054071 sudo[1324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:34:39.062010 systemd[1]: Stopping audit-rules.service... Jul 11 00:34:39.062000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:34:39.064072 auditctl[1328]: No rules Jul 11 00:34:39.064263 systemd[1]: audit-rules.service: Deactivated successfully. Jul 11 00:34:39.064419 systemd[1]: Stopped audit-rules.service. Jul 11 00:34:39.065206 kernel: kauditd_printk_skb: 174 callbacks suppressed Jul 11 00:34:39.065242 kernel: audit: type=1305 audit(1752194079.062:206): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:34:39.065257 kernel: audit: type=1300 audit(1752194079.062:206): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff4902240 a2=420 a3=0 items=0 ppid=1 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.062000 audit[1328]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff4902240 a2=420 a3=0 items=0 ppid=1 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.065747 systemd[1]: Starting audit-rules.service... Jul 11 00:34:39.062000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:34:39.069729 kernel: audit: type=1327 audit(1752194079.062:206): proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:34:39.069782 kernel: audit: type=1131 audit(1752194079.063:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.081177 augenrules[1345]: No rules Jul 11 00:34:39.081760 systemd[1]: Finished audit-rules.service. Jul 11 00:34:39.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.082598 sudo[1324]: pam_unix(sudo:session): session closed for user root Jul 11 00:34:39.081000 audit[1324]: USER_END pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.087399 kernel: audit: type=1130 audit(1752194079.081:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.087425 kernel: audit: type=1106 audit(1752194079.081:209): pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.081000 audit[1324]: CRED_DISP pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.087836 sshd[1320]: pam_unix(sshd:session): session closed for user core Jul 11 00:34:39.090238 kernel: audit: type=1104 audit(1752194079.081:210): pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.089000 audit[1320]: USER_END pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.091101 systemd[1]: Started sshd@6-10.0.0.93:22-10.0.0.1:41292.service. Jul 11 00:34:39.091669 systemd[1]: sshd@5-10.0.0.93:22-10.0.0.1:41284.service: Deactivated successfully. Jul 11 00:34:39.092260 systemd[1]: session-6.scope: Deactivated successfully. Jul 11 00:34:39.093956 kernel: audit: type=1106 audit(1752194079.089:211): pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.089000 audit[1320]: CRED_DISP pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.094392 systemd-logind[1205]: Session 6 logged out. Waiting for processes to exit. Jul 11 00:34:39.095238 systemd-logind[1205]: Removed session 6. Jul 11 00:34:39.096606 kernel: audit: type=1104 audit(1752194079.089:212): pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.096653 kernel: audit: type=1130 audit(1752194079.090:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.93:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.93:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.93:22-10.0.0.1:41284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.127000 audit[1350]: USER_ACCT pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.128877 sshd[1350]: Accepted publickey for core from 10.0.0.1 port 41292 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:34:39.128000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.128000 audit[1350]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6110f80 a2=3 a3=1 items=0 ppid=1 pid=1350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.128000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:34:39.129970 sshd[1350]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:34:39.133565 systemd-logind[1205]: New session 7 of user core. Jul 11 00:34:39.133995 systemd[1]: Started session-7.scope. Jul 11 00:34:39.136000 audit[1350]: USER_START pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.138000 audit[1353]: CRED_ACQ pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:34:39.184000 audit[1354]: USER_ACCT pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.184000 audit[1354]: CRED_REFR pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.185063 sudo[1354]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 11 00:34:39.185279 sudo[1354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:34:39.186000 audit[1354]: USER_START pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.244881 systemd[1]: Starting docker.service... Jul 11 00:34:39.327981 env[1366]: time="2025-07-11T00:34:39.327925139Z" level=info msg="Starting up" Jul 11 00:34:39.329492 env[1366]: time="2025-07-11T00:34:39.329472132Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:34:39.329492 env[1366]: time="2025-07-11T00:34:39.329491253Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:34:39.329566 env[1366]: time="2025-07-11T00:34:39.329510726Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:34:39.329566 env[1366]: time="2025-07-11T00:34:39.329520443Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:34:39.332412 env[1366]: time="2025-07-11T00:34:39.332387564Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:34:39.332412 env[1366]: time="2025-07-11T00:34:39.332411348Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:34:39.332490 env[1366]: time="2025-07-11T00:34:39.332425689Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:34:39.332490 env[1366]: time="2025-07-11T00:34:39.332435445Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:34:39.508858 env[1366]: time="2025-07-11T00:34:39.508744500Z" level=info msg="Loading containers: start." Jul 11 00:34:39.552000 audit[1401]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.552000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc6127050 a2=0 a3=1 items=0 ppid=1366 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.552000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 11 00:34:39.555000 audit[1403]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.555000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffda2ebb70 a2=0 a3=1 items=0 ppid=1366 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.555000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 11 00:34:39.557000 audit[1405]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.557000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffceca4a0 a2=0 a3=1 items=0 ppid=1366 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.557000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:34:39.559000 audit[1407]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.559000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffd8cbd10 a2=0 a3=1 items=0 ppid=1366 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.559000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:34:39.563000 audit[1409]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.563000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd7e0e3c0 a2=0 a3=1 items=0 ppid=1366 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.563000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 11 00:34:39.586000 audit[1414]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.586000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd7563110 a2=0 a3=1 items=0 ppid=1366 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.586000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 11 00:34:39.592000 audit[1416]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.592000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff78e2eb0 a2=0 a3=1 items=0 ppid=1366 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.592000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 11 00:34:39.593000 audit[1418]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.593000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc8929dd0 a2=0 a3=1 items=0 ppid=1366 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.593000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 11 00:34:39.595000 audit[1420]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.595000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd38a4eb0 a2=0 a3=1 items=0 ppid=1366 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.595000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:34:39.601000 audit[1424]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.601000 audit[1424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcf9ceb50 a2=0 a3=1 items=0 ppid=1366 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.601000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:34:39.614000 audit[1425]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.614000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe92d8ca0 a2=0 a3=1 items=0 ppid=1366 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.614000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:34:39.623816 kernel: Initializing XFRM netlink socket Jul 11 00:34:39.646620 env[1366]: time="2025-07-11T00:34:39.646586277Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 11 00:34:39.660000 audit[1433]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.660000 audit[1433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffff7daea0 a2=0 a3=1 items=0 ppid=1366 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 11 00:34:39.679000 audit[1436]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.679000 audit[1436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffffa764110 a2=0 a3=1 items=0 ppid=1366 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.679000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 11 00:34:39.682000 audit[1439]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.682000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcc7c9ff0 a2=0 a3=1 items=0 ppid=1366 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.682000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 11 00:34:39.683000 audit[1441]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.683000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffe247040 a2=0 a3=1 items=0 ppid=1366 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.683000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 11 00:34:39.685000 audit[1443]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.685000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff64dea40 a2=0 a3=1 items=0 ppid=1366 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 11 00:34:39.687000 audit[1445]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.687000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc0f86c50 a2=0 a3=1 items=0 ppid=1366 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.687000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 11 00:34:39.689000 audit[1447]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.689000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc72de3f0 a2=0 a3=1 items=0 ppid=1366 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.689000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 11 00:34:39.694000 audit[1450]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.694000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffdbe47890 a2=0 a3=1 items=0 ppid=1366 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.694000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 11 00:34:39.696000 audit[1452]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.696000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffb96b020 a2=0 a3=1 items=0 ppid=1366 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.696000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:34:39.698000 audit[1454]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.698000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd04ae570 a2=0 a3=1 items=0 ppid=1366 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.698000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:34:39.699000 audit[1456]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.699000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe580be60 a2=0 a3=1 items=0 ppid=1366 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.699000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 11 00:34:39.701898 systemd-networkd[1047]: docker0: Link UP Jul 11 00:34:39.708000 audit[1460]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.708000 audit[1460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe2e250f0 a2=0 a3=1 items=0 ppid=1366 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.708000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:34:39.720000 audit[1461]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:39.720000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd17a92a0 a2=0 a3=1 items=0 ppid=1366 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:39.720000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:34:39.722125 env[1366]: time="2025-07-11T00:34:39.722082767Z" level=info msg="Loading containers: done." Jul 11 00:34:39.738107 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2281990827-merged.mount: Deactivated successfully. Jul 11 00:34:39.743097 env[1366]: time="2025-07-11T00:34:39.743058547Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 11 00:34:39.743323 env[1366]: time="2025-07-11T00:34:39.743303240Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 11 00:34:39.743419 env[1366]: time="2025-07-11T00:34:39.743403625Z" level=info msg="Daemon has completed initialization" Jul 11 00:34:39.758001 systemd[1]: Started docker.service. Jul 11 00:34:39.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:39.765464 env[1366]: time="2025-07-11T00:34:39.765363701Z" level=info msg="API listen on /run/docker.sock" Jul 11 00:34:40.224424 env[1218]: time="2025-07-11T00:34:40.224382453Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 11 00:34:40.864413 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4065118231.mount: Deactivated successfully. Jul 11 00:34:42.223735 env[1218]: time="2025-07-11T00:34:42.223683218Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:42.225239 env[1218]: time="2025-07-11T00:34:42.225212581Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:42.226971 env[1218]: time="2025-07-11T00:34:42.226947017Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:42.229156 env[1218]: time="2025-07-11T00:34:42.229121817Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:42.230043 env[1218]: time="2025-07-11T00:34:42.230003494Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4\"" Jul 11 00:34:42.234784 env[1218]: time="2025-07-11T00:34:42.234751364Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 11 00:34:43.674283 env[1218]: time="2025-07-11T00:34:43.674234201Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:43.675678 env[1218]: time="2025-07-11T00:34:43.675647419Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:43.677545 env[1218]: time="2025-07-11T00:34:43.677514414Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:43.680148 env[1218]: time="2025-07-11T00:34:43.680111276Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:43.680461 env[1218]: time="2025-07-11T00:34:43.680438151Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65\"" Jul 11 00:34:43.681299 env[1218]: time="2025-07-11T00:34:43.681273459Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 11 00:34:44.996387 env[1218]: time="2025-07-11T00:34:44.996321543Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:45.000065 env[1218]: time="2025-07-11T00:34:45.000030400Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:45.002760 env[1218]: time="2025-07-11T00:34:45.002723603Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:45.004062 env[1218]: time="2025-07-11T00:34:45.004038547Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:45.005006 env[1218]: time="2025-07-11T00:34:45.004979672Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf\"" Jul 11 00:34:45.005517 env[1218]: time="2025-07-11T00:34:45.005495535Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 11 00:34:45.767344 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 11 00:34:45.768387 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 11 00:34:45.768428 kernel: audit: type=1130 audit(1752194085.766:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:45.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:45.767511 systemd[1]: Stopped kubelet.service. Jul 11 00:34:45.768895 systemd[1]: Starting kubelet.service... Jul 11 00:34:45.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:45.773003 kernel: audit: type=1131 audit(1752194085.766:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:45.863912 systemd[1]: Started kubelet.service. Jul 11 00:34:45.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:45.866815 kernel: audit: type=1130 audit(1752194085.862:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:45.907520 kubelet[1503]: E0711 00:34:45.907484 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:34:45.910339 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:34:45.910460 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:34:45.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:34:45.913809 kernel: audit: type=1131 audit(1752194085.909:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:34:46.051394 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3322841589.mount: Deactivated successfully. Jul 11 00:34:46.756443 env[1218]: time="2025-07-11T00:34:46.756393463Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:46.757763 env[1218]: time="2025-07-11T00:34:46.757721713Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:46.758852 env[1218]: time="2025-07-11T00:34:46.758823477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:46.760039 env[1218]: time="2025-07-11T00:34:46.760012176Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:46.760472 env[1218]: time="2025-07-11T00:34:46.760408885Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455\"" Jul 11 00:34:46.760883 env[1218]: time="2025-07-11T00:34:46.760860590Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 11 00:34:47.383120 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2546725685.mount: Deactivated successfully. Jul 11 00:34:48.368905 env[1218]: time="2025-07-11T00:34:48.368857078Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.370503 env[1218]: time="2025-07-11T00:34:48.370467001Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.372417 env[1218]: time="2025-07-11T00:34:48.372385496Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.374974 env[1218]: time="2025-07-11T00:34:48.374941209Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.375704 env[1218]: time="2025-07-11T00:34:48.375672765Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Jul 11 00:34:48.376188 env[1218]: time="2025-07-11T00:34:48.376100042Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 11 00:34:48.809600 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount725828355.mount: Deactivated successfully. Jul 11 00:34:48.813482 env[1218]: time="2025-07-11T00:34:48.813429695Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.815000 env[1218]: time="2025-07-11T00:34:48.814964403Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.816479 env[1218]: time="2025-07-11T00:34:48.816449220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.817928 env[1218]: time="2025-07-11T00:34:48.817898059Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:48.818447 env[1218]: time="2025-07-11T00:34:48.818414585Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 11 00:34:48.819459 env[1218]: time="2025-07-11T00:34:48.819416588Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 11 00:34:49.292620 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3715520119.mount: Deactivated successfully. Jul 11 00:34:51.849384 env[1218]: time="2025-07-11T00:34:51.849320900Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:51.851915 env[1218]: time="2025-07-11T00:34:51.851875218Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:51.857560 env[1218]: time="2025-07-11T00:34:51.857512111Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:51.860232 env[1218]: time="2025-07-11T00:34:51.860205574Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:51.861113 env[1218]: time="2025-07-11T00:34:51.861066454Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Jul 11 00:34:55.467175 systemd[1]: Stopped kubelet.service. Jul 11 00:34:55.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.469122 systemd[1]: Starting kubelet.service... Jul 11 00:34:55.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.472260 kernel: audit: type=1130 audit(1752194095.466:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.472332 kernel: audit: type=1131 audit(1752194095.466:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.493801 systemd[1]: Reloading. Jul 11 00:34:55.550706 /usr/lib/systemd/system-generators/torcx-generator[1561]: time="2025-07-11T00:34:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:34:55.550738 /usr/lib/systemd/system-generators/torcx-generator[1561]: time="2025-07-11T00:34:55Z" level=info msg="torcx already run" Jul 11 00:34:55.634682 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:34:55.634702 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:34:55.649855 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:34:55.711201 kernel: audit: type=1400 audit(1752194095.699:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.711315 kernel: audit: type=1400 audit(1752194095.699:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.711337 kernel: audit: type=1400 audit(1752194095.699:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.711356 kernel: audit: type=1400 audit(1752194095.699:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.711376 kernel: audit: type=1400 audit(1752194095.699:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.713826 kernel: audit: type=1400 audit(1752194095.699:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.713915 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.716812 kernel: audit: type=1400 audit(1752194095.699:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.701000 audit: BPF prog-id=46 op=LOAD Jul 11 00:34:55.701000 audit: BPF prog-id=39 op=UNLOAD Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit: BPF prog-id=47 op=LOAD Jul 11 00:34:55.703000 audit: BPF prog-id=30 op=UNLOAD Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit: BPF prog-id=48 op=LOAD Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit: BPF prog-id=49 op=LOAD Jul 11 00:34:55.708000 audit: BPF prog-id=31 op=UNLOAD Jul 11 00:34:55.708000 audit: BPF prog-id=32 op=UNLOAD Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit: BPF prog-id=50 op=LOAD Jul 11 00:34:55.710000 audit: BPF prog-id=33 op=UNLOAD Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.710000 audit: BPF prog-id=51 op=LOAD Jul 11 00:34:55.710000 audit: BPF prog-id=40 op=UNLOAD Jul 11 00:34:55.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:55.728769 systemd[1]: Started kubelet.service. Jul 11 00:34:55.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.730627 systemd[1]: Stopping kubelet.service... Jul 11 00:34:55.731112 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:34:55.731289 systemd[1]: Stopped kubelet.service. Jul 11 00:34:55.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.732743 systemd[1]: Starting kubelet.service... Jul 11 00:34:55.828776 systemd[1]: Started kubelet.service. Jul 11 00:34:55.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:34:55.866168 kubelet[1604]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:34:55.866168 kubelet[1604]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 11 00:34:55.866168 kubelet[1604]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:34:55.866578 kubelet[1604]: I0711 00:34:55.866215 1604 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:34:57.499147 kubelet[1604]: I0711 00:34:57.499109 1604 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 11 00:34:57.499147 kubelet[1604]: I0711 00:34:57.499139 1604 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:34:57.499519 kubelet[1604]: I0711 00:34:57.499349 1604 server.go:956] "Client rotation is on, will bootstrap in background" Jul 11 00:34:57.529567 kubelet[1604]: E0711 00:34:57.529526 1604 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.93:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 11 00:34:57.532752 kubelet[1604]: I0711 00:34:57.532713 1604 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:34:57.542960 kubelet[1604]: E0711 00:34:57.542918 1604 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:34:57.543047 kubelet[1604]: I0711 00:34:57.542964 1604 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:34:57.545484 kubelet[1604]: I0711 00:34:57.545460 1604 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:34:57.546621 kubelet[1604]: I0711 00:34:57.546576 1604 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:34:57.546769 kubelet[1604]: I0711 00:34:57.546622 1604 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:34:57.546858 kubelet[1604]: I0711 00:34:57.546840 1604 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:34:57.546858 kubelet[1604]: I0711 00:34:57.546850 1604 container_manager_linux.go:303] "Creating device plugin manager" Jul 11 00:34:57.547051 kubelet[1604]: I0711 00:34:57.547026 1604 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:34:57.551981 kubelet[1604]: I0711 00:34:57.551957 1604 kubelet.go:480] "Attempting to sync node with API server" Jul 11 00:34:57.552025 kubelet[1604]: I0711 00:34:57.551984 1604 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:34:57.552025 kubelet[1604]: I0711 00:34:57.552009 1604 kubelet.go:386] "Adding apiserver pod source" Jul 11 00:34:57.556129 kubelet[1604]: I0711 00:34:57.556106 1604 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:34:57.557233 kubelet[1604]: I0711 00:34:57.557205 1604 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:34:57.557714 kubelet[1604]: E0711 00:34:57.557686 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.93:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 11 00:34:57.557899 kubelet[1604]: E0711 00:34:57.557838 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.93:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 11 00:34:57.557957 kubelet[1604]: I0711 00:34:57.557919 1604 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 11 00:34:57.558057 kubelet[1604]: W0711 00:34:57.558036 1604 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 11 00:34:57.560218 kubelet[1604]: I0711 00:34:57.560187 1604 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 11 00:34:57.560289 kubelet[1604]: I0711 00:34:57.560239 1604 server.go:1289] "Started kubelet" Jul 11 00:34:57.560000 audit[1604]: AVC avc: denied { mac_admin } for pid=1604 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:57.560000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:34:57.560000 audit[1604]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400097ec00 a1=4000a17c08 a2=400097ebd0 a3=25 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.560000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:34:57.560000 audit[1604]: AVC avc: denied { mac_admin } for pid=1604 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:57.560000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:34:57.560000 audit[1604]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400043ffa0 a1=4000a17c20 a2=400097ec90 a3=25 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.560000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:34:57.561823 kubelet[1604]: I0711 00:34:57.561506 1604 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:34:57.561823 kubelet[1604]: I0711 00:34:57.561550 1604 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 11 00:34:57.561823 kubelet[1604]: I0711 00:34:57.561617 1604 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:34:57.566000 audit[1620]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.566000 audit[1620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffed057b90 a2=0 a3=1 items=0 ppid=1604 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:34:57.568821 kubelet[1604]: I0711 00:34:57.568777 1604 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:34:57.568000 audit[1621]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.568000 audit[1621]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd55a1fe0 a2=0 a3=1 items=0 ppid=1604 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:34:57.569818 kubelet[1604]: I0711 00:34:57.569771 1604 server.go:317] "Adding debug handlers to kubelet server" Jul 11 00:34:57.571457 kubelet[1604]: I0711 00:34:57.571422 1604 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 11 00:34:57.571643 kubelet[1604]: E0711 00:34:57.571618 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:34:57.572778 kubelet[1604]: E0711 00:34:57.572749 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.93:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.93:6443: connect: connection refused" interval="200ms" Jul 11 00:34:57.570000 audit[1625]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.570000 audit[1625]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff11c9340 a2=0 a3=1 items=0 ppid=1604 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.570000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:34:57.573136 kubelet[1604]: I0711 00:34:57.573112 1604 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:34:57.573237 kubelet[1604]: I0711 00:34:57.573225 1604 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 11 00:34:57.573630 kubelet[1604]: E0711 00:34:57.570870 1604 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.93:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.93:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18510b3f8a9cb832 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-11 00:34:57.560205362 +0000 UTC m=+1.727151356,LastTimestamp:2025-07-11 00:34:57.560205362 +0000 UTC m=+1.727151356,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 11 00:34:57.573630 kubelet[1604]: E0711 00:34:57.573587 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.93:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 11 00:34:57.573904 kubelet[1604]: I0711 00:34:57.573873 1604 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:34:57.574078 kubelet[1604]: I0711 00:34:57.574003 1604 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:34:57.574614 kubelet[1604]: I0711 00:34:57.574474 1604 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:34:57.575871 kubelet[1604]: I0711 00:34:57.575845 1604 factory.go:223] Registration of the containerd container factory successfully Jul 11 00:34:57.575871 kubelet[1604]: I0711 00:34:57.575865 1604 factory.go:223] Registration of the systemd container factory successfully Jul 11 00:34:57.575000 audit[1627]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.575000 audit[1627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc561b720 a2=0 a3=1 items=0 ppid=1604 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:34:57.584086 kubelet[1604]: I0711 00:34:57.584054 1604 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:34:57.584556 kubelet[1604]: E0711 00:34:57.584531 1604 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 11 00:34:57.586000 audit[1633]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.586000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff070f030 a2=0 a3=1 items=0 ppid=1604 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 11 00:34:57.587295 kubelet[1604]: I0711 00:34:57.587248 1604 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 11 00:34:57.587000 audit[1634]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:34:57.587000 audit[1634]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcbe80ca0 a2=0 a3=1 items=0 ppid=1604 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:34:57.588569 kubelet[1604]: I0711 00:34:57.588543 1604 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 11 00:34:57.588663 kubelet[1604]: I0711 00:34:57.588652 1604 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 11 00:34:57.588753 kubelet[1604]: I0711 00:34:57.588738 1604 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 11 00:34:57.589041 kubelet[1604]: I0711 00:34:57.589014 1604 kubelet.go:2436] "Starting kubelet main sync loop" Jul 11 00:34:57.589197 kubelet[1604]: E0711 00:34:57.589171 1604 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:34:57.588000 audit[1635]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.588000 audit[1635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef6c7d90 a2=0 a3=1 items=0 ppid=1604 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.588000 audit[1637]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:34:57.588000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdadfd5b0 a2=0 a3=1 items=0 ppid=1604 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.588000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:34:57.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:34:57.590835 kubelet[1604]: E0711 00:34:57.590807 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.93:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 11 00:34:57.591584 kubelet[1604]: I0711 00:34:57.591518 1604 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 11 00:34:57.591584 kubelet[1604]: I0711 00:34:57.591529 1604 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 11 00:34:57.591584 kubelet[1604]: I0711 00:34:57.591546 1604 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:34:57.590000 audit[1641]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:34:57.590000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffeca90b90 a2=0 a3=1 items=0 ppid=1604 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.591000 audit[1642]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.591000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe88f9790 a2=0 a3=1 items=0 ppid=1604 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.591000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:34:57.590000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:34:57.592000 audit[1643]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:34:57.592000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1921760 a2=0 a3=1 items=0 ppid=1604 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.592000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:34:57.593259 kubelet[1604]: I0711 00:34:57.593236 1604 policy_none.go:49] "None policy: Start" Jul 11 00:34:57.593259 kubelet[1604]: I0711 00:34:57.593258 1604 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 11 00:34:57.593341 kubelet[1604]: I0711 00:34:57.593269 1604 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:34:57.593000 audit[1644]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:34:57.593000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff51965a0 a2=0 a3=1 items=0 ppid=1604 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.593000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:34:57.597558 systemd[1]: Created slice kubepods.slice. Jul 11 00:34:57.601645 systemd[1]: Created slice kubepods-burstable.slice. Jul 11 00:34:57.604335 systemd[1]: Created slice kubepods-besteffort.slice. Jul 11 00:34:57.617727 kubelet[1604]: E0711 00:34:57.617699 1604 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 11 00:34:57.616000 audit[1604]: AVC avc: denied { mac_admin } for pid=1604 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:57.616000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:34:57.616000 audit[1604]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006f0c90 a1=4000ee1068 a2=40006f0c60 a3=25 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:57.616000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:34:57.618009 kubelet[1604]: E0711 00:34:57.617812 1604 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 11 00:34:57.618009 kubelet[1604]: I0711 00:34:57.617965 1604 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:34:57.618009 kubelet[1604]: I0711 00:34:57.617979 1604 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:34:57.618262 kubelet[1604]: I0711 00:34:57.618239 1604 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:34:57.620159 kubelet[1604]: E0711 00:34:57.620127 1604 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 11 00:34:57.620248 kubelet[1604]: E0711 00:34:57.620226 1604 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 11 00:34:57.702206 systemd[1]: Created slice kubepods-burstable-pod662ef4319b679aa6ef2976494f77a62f.slice. Jul 11 00:34:57.715523 kubelet[1604]: E0711 00:34:57.715491 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:34:57.718726 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 11 00:34:57.719669 kubelet[1604]: I0711 00:34:57.719644 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:34:57.720103 kubelet[1604]: E0711 00:34:57.720078 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.93:6443/api/v1/nodes\": dial tcp 10.0.0.93:6443: connect: connection refused" node="localhost" Jul 11 00:34:57.726798 kubelet[1604]: E0711 00:34:57.726768 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:34:57.728194 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 11 00:34:57.729510 kubelet[1604]: E0711 00:34:57.729487 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:34:57.774114 kubelet[1604]: E0711 00:34:57.774066 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.93:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.93:6443: connect: connection refused" interval="400ms" Jul 11 00:34:57.874411 kubelet[1604]: I0711 00:34:57.874378 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:34:57.874515 kubelet[1604]: I0711 00:34:57.874418 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/662ef4319b679aa6ef2976494f77a62f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"662ef4319b679aa6ef2976494f77a62f\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:34:57.874515 kubelet[1604]: I0711 00:34:57.874443 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:34:57.874515 kubelet[1604]: I0711 00:34:57.874461 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:34:57.874515 kubelet[1604]: I0711 00:34:57.874488 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:34:57.874515 kubelet[1604]: I0711 00:34:57.874503 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:34:57.874638 kubelet[1604]: I0711 00:34:57.874518 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/662ef4319b679aa6ef2976494f77a62f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"662ef4319b679aa6ef2976494f77a62f\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:34:57.874638 kubelet[1604]: I0711 00:34:57.874533 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/662ef4319b679aa6ef2976494f77a62f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"662ef4319b679aa6ef2976494f77a62f\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:34:57.874638 kubelet[1604]: I0711 00:34:57.874554 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:34:57.921970 kubelet[1604]: I0711 00:34:57.921912 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:34:57.922516 kubelet[1604]: E0711 00:34:57.922475 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.93:6443/api/v1/nodes\": dial tcp 10.0.0.93:6443: connect: connection refused" node="localhost" Jul 11 00:34:58.016158 kubelet[1604]: E0711 00:34:58.016120 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:58.016933 env[1218]: time="2025-07-11T00:34:58.016883283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:662ef4319b679aa6ef2976494f77a62f,Namespace:kube-system,Attempt:0,}" Jul 11 00:34:58.028240 kubelet[1604]: E0711 00:34:58.028150 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:58.029099 env[1218]: time="2025-07-11T00:34:58.028832090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 11 00:34:58.030824 kubelet[1604]: E0711 00:34:58.030654 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:58.031267 env[1218]: time="2025-07-11T00:34:58.031057406Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 11 00:34:58.174567 kubelet[1604]: E0711 00:34:58.174524 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.93:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.93:6443: connect: connection refused" interval="800ms" Jul 11 00:34:58.324410 kubelet[1604]: I0711 00:34:58.324318 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:34:58.325365 kubelet[1604]: E0711 00:34:58.325324 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.93:6443/api/v1/nodes\": dial tcp 10.0.0.93:6443: connect: connection refused" node="localhost" Jul 11 00:34:58.639339 kubelet[1604]: E0711 00:34:58.639228 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.93:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 11 00:34:58.683376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3411101445.mount: Deactivated successfully. Jul 11 00:34:58.684585 kubelet[1604]: E0711 00:34:58.684530 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.93:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 11 00:34:58.688585 env[1218]: time="2025-07-11T00:34:58.688537353Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.689486 env[1218]: time="2025-07-11T00:34:58.689456864Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.692052 env[1218]: time="2025-07-11T00:34:58.692023906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.692887 env[1218]: time="2025-07-11T00:34:58.692864664Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.695064 env[1218]: time="2025-07-11T00:34:58.695029997Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.697474 env[1218]: time="2025-07-11T00:34:58.697439654Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.700618 env[1218]: time="2025-07-11T00:34:58.700588874Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.702078 env[1218]: time="2025-07-11T00:34:58.702040563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.703029 env[1218]: time="2025-07-11T00:34:58.703002525Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.703934 env[1218]: time="2025-07-11T00:34:58.703909895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.705600 env[1218]: time="2025-07-11T00:34:58.705566492Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.706252 env[1218]: time="2025-07-11T00:34:58.706220353Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736422356Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736457499Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736468241Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736640083Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4da203c5d33b84324e9dd71692b970c3b6ffed57d87929e96efb39785de94fed pid=1668 runtime=io.containerd.runc.v2 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736353388Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736393802Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736404385Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:34:58.736875 env[1218]: time="2025-07-11T00:34:58.736609133Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dd7bdaba938c5ae6b92db4e114659a08e558297fad9a2bd67e6534288b18f55d pid=1666 runtime=io.containerd.runc.v2 Jul 11 00:34:58.739066 env[1218]: time="2025-07-11T00:34:58.738865718Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:34:58.739066 env[1218]: time="2025-07-11T00:34:58.738905654Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:34:58.739066 env[1218]: time="2025-07-11T00:34:58.738916276Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:34:58.739713 env[1218]: time="2025-07-11T00:34:58.739654082Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d32f564dd35709dc6bca72928bebba8b1d61e9b6631badfa4722dfaaa4d7f45b pid=1667 runtime=io.containerd.runc.v2 Jul 11 00:34:58.747839 systemd[1]: Started cri-containerd-4da203c5d33b84324e9dd71692b970c3b6ffed57d87929e96efb39785de94fed.scope. Jul 11 00:34:58.749903 systemd[1]: Started cri-containerd-dd7bdaba938c5ae6b92db4e114659a08e558297fad9a2bd67e6534288b18f55d.scope. Jul 11 00:34:58.763274 systemd[1]: Started cri-containerd-d32f564dd35709dc6bca72928bebba8b1d61e9b6631badfa4722dfaaa4d7f45b.scope. Jul 11 00:34:58.769853 kubelet[1604]: E0711 00:34:58.769810 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.93:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.781000 audit: BPF prog-id=61 op=LOAD Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1668 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613230336335643333623834333234653964643731363932623937 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1668 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613230336335643333623834333234653964643731363932623937 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.782000 audit: BPF prog-id=62 op=LOAD Jul 11 00:34:58.782000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1668 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613230336335643333623834333234653964643731363932623937 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit: BPF prog-id=63 op=LOAD Jul 11 00:34:58.783000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1668 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613230336335643333623834333234653964643731363932623937 Jul 11 00:34:58.783000 audit: BPF prog-id=63 op=UNLOAD Jul 11 00:34:58.783000 audit: BPF prog-id=62 op=UNLOAD Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.783000 audit: BPF prog-id=64 op=LOAD Jul 11 00:34:58.783000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1668 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613230336335643333623834333234653964643731363932623937 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.787000 audit: BPF prog-id=65 op=LOAD Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1666 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464376264616261393338633561653662393264623465313134363539 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1666 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464376264616261393338633561653662393264623465313134363539 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.788000 audit: BPF prog-id=66 op=LOAD Jul 11 00:34:58.788000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1666 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464376264616261393338633561653662393264623465313134363539 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.789000 audit: BPF prog-id=67 op=LOAD Jul 11 00:34:58.789000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1666 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464376264616261393338633561653662393264623465313134363539 Jul 11 00:34:58.790000 audit: BPF prog-id=67 op=UNLOAD Jul 11 00:34:58.790000 audit: BPF prog-id=66 op=UNLOAD Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.790000 audit: BPF prog-id=68 op=LOAD Jul 11 00:34:58.790000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1666 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464376264616261393338633561653662393264623465313134363539 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit: BPF prog-id=69 op=LOAD Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1667 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433326635363464643335373039646336626361373239323862656262 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1667 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433326635363464643335373039646336626361373239323862656262 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit: BPF prog-id=70 op=LOAD Jul 11 00:34:58.792000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1667 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433326635363464643335373039646336626361373239323862656262 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.792000 audit: BPF prog-id=71 op=LOAD Jul 11 00:34:58.792000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1667 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433326635363464643335373039646336626361373239323862656262 Jul 11 00:34:58.793000 audit: BPF prog-id=71 op=UNLOAD Jul 11 00:34:58.793000 audit: BPF prog-id=70 op=UNLOAD Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.793000 audit: BPF prog-id=72 op=LOAD Jul 11 00:34:58.793000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1667 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433326635363464643335373039646336626361373239323862656262 Jul 11 00:34:58.812094 env[1218]: time="2025-07-11T00:34:58.812050664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:662ef4319b679aa6ef2976494f77a62f,Namespace:kube-system,Attempt:0,} returns sandbox id \"4da203c5d33b84324e9dd71692b970c3b6ffed57d87929e96efb39785de94fed\"" Jul 11 00:34:58.817029 kubelet[1604]: E0711 00:34:58.816999 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:58.820114 env[1218]: time="2025-07-11T00:34:58.820075426Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"dd7bdaba938c5ae6b92db4e114659a08e558297fad9a2bd67e6534288b18f55d\"" Jul 11 00:34:58.821070 kubelet[1604]: E0711 00:34:58.821042 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:58.822676 env[1218]: time="2025-07-11T00:34:58.822641231Z" level=info msg="CreateContainer within sandbox \"4da203c5d33b84324e9dd71692b970c3b6ffed57d87929e96efb39785de94fed\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 11 00:34:58.822943 kubelet[1604]: E0711 00:34:58.822910 1604 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.93:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.93:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 11 00:34:58.824328 env[1218]: time="2025-07-11T00:34:58.824285408Z" level=info msg="CreateContainer within sandbox \"dd7bdaba938c5ae6b92db4e114659a08e558297fad9a2bd67e6534288b18f55d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 11 00:34:58.824687 env[1218]: time="2025-07-11T00:34:58.824616671Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"d32f564dd35709dc6bca72928bebba8b1d61e9b6631badfa4722dfaaa4d7f45b\"" Jul 11 00:34:58.825236 kubelet[1604]: E0711 00:34:58.825215 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:58.828542 env[1218]: time="2025-07-11T00:34:58.828493472Z" level=info msg="CreateContainer within sandbox \"d32f564dd35709dc6bca72928bebba8b1d61e9b6631badfa4722dfaaa4d7f45b\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 11 00:34:58.839465 env[1218]: time="2025-07-11T00:34:58.839420973Z" level=info msg="CreateContainer within sandbox \"dd7bdaba938c5ae6b92db4e114659a08e558297fad9a2bd67e6534288b18f55d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"3e16333300ff31877dcc294b3d5c36f150a7df570a5f2925b605a32e05509056\"" Jul 11 00:34:58.840137 env[1218]: time="2025-07-11T00:34:58.840107901Z" level=info msg="StartContainer for \"3e16333300ff31877dcc294b3d5c36f150a7df570a5f2925b605a32e05509056\"" Jul 11 00:34:58.843616 env[1218]: time="2025-07-11T00:34:58.843576842Z" level=info msg="CreateContainer within sandbox \"4da203c5d33b84324e9dd71692b970c3b6ffed57d87929e96efb39785de94fed\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a63d1db7bf902bbc97ad882d053c89dc6114846e6e485cbecbc8139056a94736\"" Jul 11 00:34:58.844117 env[1218]: time="2025-07-11T00:34:58.844079508Z" level=info msg="StartContainer for \"a63d1db7bf902bbc97ad882d053c89dc6114846e6e485cbecbc8139056a94736\"" Jul 11 00:34:58.845613 env[1218]: time="2025-07-11T00:34:58.845576204Z" level=info msg="CreateContainer within sandbox \"d32f564dd35709dc6bca72928bebba8b1d61e9b6631badfa4722dfaaa4d7f45b\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"1fa43f0b190382ef669827663cfffc615f3b94a838f389c8e3e745b401ef8d52\"" Jul 11 00:34:58.846153 env[1218]: time="2025-07-11T00:34:58.846067887Z" level=info msg="StartContainer for \"1fa43f0b190382ef669827663cfffc615f3b94a838f389c8e3e745b401ef8d52\"" Jul 11 00:34:58.858264 systemd[1]: Started cri-containerd-3e16333300ff31877dcc294b3d5c36f150a7df570a5f2925b605a32e05509056.scope. Jul 11 00:34:58.863357 systemd[1]: Started cri-containerd-a63d1db7bf902bbc97ad882d053c89dc6114846e6e485cbecbc8139056a94736.scope. Jul 11 00:34:58.873626 systemd[1]: Started cri-containerd-1fa43f0b190382ef669827663cfffc615f3b94a838f389c8e3e745b401ef8d52.scope. Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.905000 audit: BPF prog-id=73 op=LOAD Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit: BPF prog-id=74 op=LOAD Jul 11 00:34:58.911000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1668 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136336431646237626639303262626339376164383832643035336338 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1668 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136336431646237626639303262626339376164383832643035336338 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit: BPF prog-id=75 op=LOAD Jul 11 00:34:58.911000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1668 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136336431646237626639303262626339376164383832643035336338 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit: BPF prog-id=76 op=LOAD Jul 11 00:34:58.911000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1668 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136336431646237626639303262626339376164383832643035336338 Jul 11 00:34:58.911000 audit: BPF prog-id=76 op=UNLOAD Jul 11 00:34:58.911000 audit: BPF prog-id=75 op=UNLOAD Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit: BPF prog-id=77 op=LOAD Jul 11 00:34:58.911000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1668 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136336431646237626639303262626339376164383832643035336338 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.911000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1667 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.912000 audit: BPF prog-id=78 op=LOAD Jul 11 00:34:58.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166613433663062313930333832656636363938323736363363666666 Jul 11 00:34:58.912000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1666 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313633333333303066663331383737646363323934623364356333 Jul 11 00:34:58.912000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1667 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166613433663062313930333832656636363938323736363363666666 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit: BPF prog-id=79 op=LOAD Jul 11 00:34:58.913000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1667 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166613433663062313930333832656636363938323736363363666666 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1666 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313633333333303066663331383737646363323934623364356333 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.913000 audit: BPF prog-id=80 op=LOAD Jul 11 00:34:58.913000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1667 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166613433663062313930333832656636363938323736363363666666 Jul 11 00:34:58.914000 audit: BPF prog-id=80 op=UNLOAD Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit: BPF prog-id=81 op=LOAD Jul 11 00:34:58.914000 audit: BPF prog-id=79 op=UNLOAD Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1666 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313633333333303066663331383737646363323934623364356333 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.915000 audit: BPF prog-id=82 op=LOAD Jul 11 00:34:58.915000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1666 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313633333333303066663331383737646363323934623364356333 Jul 11 00:34:58.915000 audit: BPF prog-id=82 op=UNLOAD Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.914000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit: BPF prog-id=81 op=UNLOAD Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:34:58.916000 audit: BPF prog-id=84 op=LOAD Jul 11 00:34:58.914000 audit: BPF prog-id=83 op=LOAD Jul 11 00:34:58.916000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1666 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313633333333303066663331383737646363323934623364356333 Jul 11 00:34:58.914000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1667 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:34:58.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166613433663062313930333832656636363938323736363363666666 Jul 11 00:34:58.943321 env[1218]: time="2025-07-11T00:34:58.940346828Z" level=info msg="StartContainer for \"3e16333300ff31877dcc294b3d5c36f150a7df570a5f2925b605a32e05509056\" returns successfully" Jul 11 00:34:58.943321 env[1218]: time="2025-07-11T00:34:58.941038308Z" level=info msg="StartContainer for \"1fa43f0b190382ef669827663cfffc615f3b94a838f389c8e3e745b401ef8d52\" returns successfully" Jul 11 00:34:58.970512 env[1218]: time="2025-07-11T00:34:58.966927935Z" level=info msg="StartContainer for \"a63d1db7bf902bbc97ad882d053c89dc6114846e6e485cbecbc8139056a94736\" returns successfully" Jul 11 00:34:58.982499 kubelet[1604]: E0711 00:34:58.977472 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.93:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.93:6443: connect: connection refused" interval="1.6s" Jul 11 00:34:59.126439 kubelet[1604]: I0711 00:34:59.126400 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:34:59.126746 kubelet[1604]: E0711 00:34:59.126719 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.93:6443/api/v1/nodes\": dial tcp 10.0.0.93:6443: connect: connection refused" node="localhost" Jul 11 00:34:59.596413 kubelet[1604]: E0711 00:34:59.596374 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:34:59.596552 kubelet[1604]: E0711 00:34:59.596512 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:59.598872 kubelet[1604]: E0711 00:34:59.598847 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:34:59.598988 kubelet[1604]: E0711 00:34:59.598971 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:34:59.600689 kubelet[1604]: E0711 00:34:59.600666 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:34:59.600798 kubelet[1604]: E0711 00:34:59.600774 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:00.603633 kubelet[1604]: E0711 00:35:00.603584 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:35:00.603970 kubelet[1604]: E0711 00:35:00.603714 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:00.604021 kubelet[1604]: E0711 00:35:00.603978 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:35:00.604083 kubelet[1604]: E0711 00:35:00.604055 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:00.604283 kubelet[1604]: E0711 00:35:00.604258 1604 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:35:00.604362 kubelet[1604]: E0711 00:35:00.604344 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:00.728583 kubelet[1604]: I0711 00:35:00.728531 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:35:00.826000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.829382 kernel: kauditd_printk_skb: 745 callbacks suppressed Jul 11 00:35:00.829447 kernel: audit: type=1400 audit(1752194100.826:458): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.826000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003f39aa0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.835865 kernel: audit: type=1300 audit(1752194100.826:458): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003f39aa0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.835930 kernel: audit: type=1327 audit(1752194100.826:458): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.826000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.826000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.844587 kernel: audit: type=1400 audit(1752194100.826:459): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.849808 kernel: audit: type=1300 audit(1752194100.826:459): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=400460bca0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.826000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=400460bca0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.826000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.856581 kernel: audit: type=1327 audit(1752194100.826:459): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.856631 kernel: audit: type=1400 audit(1752194100.828:460): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.828000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.828000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40043cc8a0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.866510 kernel: audit: type=1300 audit(1752194100.828:460): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40043cc8a0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.828000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.869928 kernel: audit: type=1327 audit(1752194100.828:460): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.839000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.873467 kernel: audit: type=1400 audit(1752194100.839:461): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.839000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=400454ac30 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.919000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.919000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4005830620 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.919000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.920000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:00.920000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40043cd4d0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:35:00.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:35:00.926863 kubelet[1604]: E0711 00:35:00.926819 1604 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 11 00:35:00.980051 kubelet[1604]: I0711 00:35:00.979992 1604 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 11 00:35:00.980051 kubelet[1604]: E0711 00:35:00.980036 1604 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 11 00:35:00.987225 kubelet[1604]: E0711 00:35:00.987199 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:35:01.087728 kubelet[1604]: E0711 00:35:01.087683 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:35:01.172212 kubelet[1604]: I0711 00:35:01.172098 1604 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:01.177797 kubelet[1604]: E0711 00:35:01.177758 1604 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:01.177915 kubelet[1604]: I0711 00:35:01.177808 1604 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:01.179834 kubelet[1604]: E0711 00:35:01.179802 1604 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:01.179834 kubelet[1604]: I0711 00:35:01.179832 1604 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:01.181743 kubelet[1604]: E0711 00:35:01.181700 1604 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:01.448000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:01.448000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400045e360 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:01.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:01.448000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:01.448000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40000e30e0 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:01.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:01.559775 kubelet[1604]: I0711 00:35:01.559684 1604 apiserver.go:52] "Watching apiserver" Jul 11 00:35:01.574127 kubelet[1604]: I0711 00:35:01.574072 1604 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 11 00:35:02.779304 kubelet[1604]: I0711 00:35:02.779258 1604 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:02.783694 kubelet[1604]: E0711 00:35:02.783666 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:02.802384 systemd[1]: Reloading. Jul 11 00:35:02.815817 kubelet[1604]: I0711 00:35:02.815776 1604 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:02.822086 kubelet[1604]: E0711 00:35:02.822047 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:02.854456 /usr/lib/systemd/system-generators/torcx-generator[1907]: time="2025-07-11T00:35:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:35:02.854489 /usr/lib/systemd/system-generators/torcx-generator[1907]: time="2025-07-11T00:35:02Z" level=info msg="torcx already run" Jul 11 00:35:02.913013 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:35:02.913031 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:35:02.928810 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.988000 audit: BPF prog-id=85 op=LOAD Jul 11 00:35:02.988000 audit: BPF prog-id=69 op=UNLOAD Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit: BPF prog-id=86 op=LOAD Jul 11 00:35:02.989000 audit: BPF prog-id=46 op=UNLOAD Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit: BPF prog-id=87 op=LOAD Jul 11 00:35:02.990000 audit: BPF prog-id=74 op=UNLOAD Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.990000 audit: BPF prog-id=88 op=LOAD Jul 11 00:35:02.990000 audit: BPF prog-id=65 op=UNLOAD Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit: BPF prog-id=89 op=LOAD Jul 11 00:35:02.991000 audit: BPF prog-id=73 op=UNLOAD Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit: BPF prog-id=90 op=LOAD Jul 11 00:35:02.992000 audit: BPF prog-id=47 op=UNLOAD Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit: BPF prog-id=91 op=LOAD Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit: BPF prog-id=92 op=LOAD Jul 11 00:35:02.992000 audit: BPF prog-id=48 op=UNLOAD Jul 11 00:35:02.992000 audit: BPF prog-id=49 op=UNLOAD Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit: BPF prog-id=93 op=LOAD Jul 11 00:35:02.993000 audit: BPF prog-id=50 op=UNLOAD Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit: BPF prog-id=94 op=LOAD Jul 11 00:35:02.993000 audit: BPF prog-id=51 op=UNLOAD Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.993000 audit: BPF prog-id=95 op=LOAD Jul 11 00:35:02.993000 audit: BPF prog-id=78 op=UNLOAD Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.994000 audit: BPF prog-id=96 op=LOAD Jul 11 00:35:02.994000 audit: BPF prog-id=61 op=UNLOAD Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit: BPF prog-id=97 op=LOAD Jul 11 00:35:02.995000 audit: BPF prog-id=52 op=UNLOAD Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit: BPF prog-id=98 op=LOAD Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.995000 audit: BPF prog-id=99 op=LOAD Jul 11 00:35:02.995000 audit: BPF prog-id=53 op=UNLOAD Jul 11 00:35:02.995000 audit: BPF prog-id=54 op=UNLOAD Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit: BPF prog-id=100 op=LOAD Jul 11 00:35:02.996000 audit: BPF prog-id=55 op=UNLOAD Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit: BPF prog-id=101 op=LOAD Jul 11 00:35:02.996000 audit: BPF prog-id=56 op=UNLOAD Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit: BPF prog-id=102 op=LOAD Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.996000 audit: BPF prog-id=103 op=LOAD Jul 11 00:35:02.996000 audit: BPF prog-id=57 op=UNLOAD Jul 11 00:35:02.996000 audit: BPF prog-id=58 op=UNLOAD Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit: BPF prog-id=104 op=LOAD Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:02.997000 audit: BPF prog-id=105 op=LOAD Jul 11 00:35:02.997000 audit: BPF prog-id=59 op=UNLOAD Jul 11 00:35:02.997000 audit: BPF prog-id=60 op=UNLOAD Jul 11 00:35:03.010306 systemd[1]: Stopping kubelet.service... Jul 11 00:35:03.036079 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:35:03.036264 systemd[1]: Stopped kubelet.service. Jul 11 00:35:03.036317 systemd[1]: kubelet.service: Consumed 2.027s CPU time. Jul 11 00:35:03.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:03.037970 systemd[1]: Starting kubelet.service... Jul 11 00:35:03.134559 systemd[1]: Started kubelet.service. Jul 11 00:35:03.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:03.170511 kubelet[1950]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:35:03.170511 kubelet[1950]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 11 00:35:03.170511 kubelet[1950]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:35:03.170906 kubelet[1950]: I0711 00:35:03.170553 1950 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:35:03.176853 kubelet[1950]: I0711 00:35:03.176820 1950 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 11 00:35:03.176853 kubelet[1950]: I0711 00:35:03.176847 1950 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:35:03.177416 kubelet[1950]: I0711 00:35:03.177399 1950 server.go:956] "Client rotation is on, will bootstrap in background" Jul 11 00:35:03.178667 kubelet[1950]: I0711 00:35:03.178646 1950 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 11 00:35:03.180849 kubelet[1950]: I0711 00:35:03.180820 1950 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:35:03.191637 kubelet[1950]: E0711 00:35:03.191254 1950 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:35:03.191637 kubelet[1950]: I0711 00:35:03.191317 1950 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:35:03.194839 kubelet[1950]: I0711 00:35:03.194484 1950 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:35:03.194839 kubelet[1950]: I0711 00:35:03.194702 1950 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:35:03.194894 kubelet[1950]: I0711 00:35:03.194739 1950 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:35:03.194976 kubelet[1950]: I0711 00:35:03.194905 1950 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:35:03.194976 kubelet[1950]: I0711 00:35:03.194915 1950 container_manager_linux.go:303] "Creating device plugin manager" Jul 11 00:35:03.194976 kubelet[1950]: I0711 00:35:03.194957 1950 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:35:03.195145 kubelet[1950]: I0711 00:35:03.195131 1950 kubelet.go:480] "Attempting to sync node with API server" Jul 11 00:35:03.195145 kubelet[1950]: I0711 00:35:03.195149 1950 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:35:03.195216 kubelet[1950]: I0711 00:35:03.195198 1950 kubelet.go:386] "Adding apiserver pod source" Jul 11 00:35:03.195216 kubelet[1950]: I0711 00:35:03.195207 1950 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:35:03.196844 kubelet[1950]: I0711 00:35:03.196735 1950 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:35:03.197442 kubelet[1950]: I0711 00:35:03.197421 1950 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 11 00:35:03.209671 kubelet[1950]: I0711 00:35:03.209647 1950 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 11 00:35:03.209850 kubelet[1950]: I0711 00:35:03.209837 1950 server.go:1289] "Started kubelet" Jul 11 00:35:03.210028 kubelet[1950]: I0711 00:35:03.209988 1950 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:35:03.210366 kubelet[1950]: I0711 00:35:03.210353 1950 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:35:03.210900 kubelet[1950]: I0711 00:35:03.210864 1950 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:35:03.213696 kubelet[1950]: I0711 00:35:03.213675 1950 server.go:317] "Adding debug handlers to kubelet server" Jul 11 00:35:03.218000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:03.218000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:35:03.218000 audit[1950]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c7a3f0 a1=4000c74768 a2=4000c7a3c0 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:03.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:35:03.219000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:03.219000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:35:03.219000 audit[1950]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400091c840 a1=4000c74780 a2=4000c7a480 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:03.219000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:35:03.220186 kubelet[1950]: I0711 00:35:03.219818 1950 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:35:03.220186 kubelet[1950]: I0711 00:35:03.219873 1950 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 11 00:35:03.220186 kubelet[1950]: I0711 00:35:03.219910 1950 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:35:03.221864 kubelet[1950]: I0711 00:35:03.221840 1950 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:35:03.222519 kubelet[1950]: E0711 00:35:03.222299 1950 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:35:03.222519 kubelet[1950]: I0711 00:35:03.222331 1950 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 11 00:35:03.222519 kubelet[1950]: I0711 00:35:03.222495 1950 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 11 00:35:03.222644 kubelet[1950]: I0711 00:35:03.222620 1950 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:35:03.223185 kubelet[1950]: E0711 00:35:03.223082 1950 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 11 00:35:03.229488 kubelet[1950]: I0711 00:35:03.229467 1950 factory.go:223] Registration of the containerd container factory successfully Jul 11 00:35:03.229591 kubelet[1950]: I0711 00:35:03.229581 1950 factory.go:223] Registration of the systemd container factory successfully Jul 11 00:35:03.229810 kubelet[1950]: I0711 00:35:03.229773 1950 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:35:03.241495 kubelet[1950]: I0711 00:35:03.241461 1950 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 11 00:35:03.242375 kubelet[1950]: I0711 00:35:03.242352 1950 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 11 00:35:03.242375 kubelet[1950]: I0711 00:35:03.242371 1950 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 11 00:35:03.242472 kubelet[1950]: I0711 00:35:03.242390 1950 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 11 00:35:03.242472 kubelet[1950]: I0711 00:35:03.242397 1950 kubelet.go:2436] "Starting kubelet main sync loop" Jul 11 00:35:03.242472 kubelet[1950]: E0711 00:35:03.242445 1950 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:35:03.267196 kubelet[1950]: I0711 00:35:03.267141 1950 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 11 00:35:03.267196 kubelet[1950]: I0711 00:35:03.267186 1950 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 11 00:35:03.267334 kubelet[1950]: I0711 00:35:03.267208 1950 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:35:03.267361 kubelet[1950]: I0711 00:35:03.267332 1950 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 11 00:35:03.267361 kubelet[1950]: I0711 00:35:03.267342 1950 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 11 00:35:03.267361 kubelet[1950]: I0711 00:35:03.267358 1950 policy_none.go:49] "None policy: Start" Jul 11 00:35:03.267418 kubelet[1950]: I0711 00:35:03.267367 1950 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 11 00:35:03.267418 kubelet[1950]: I0711 00:35:03.267375 1950 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:35:03.267465 kubelet[1950]: I0711 00:35:03.267460 1950 state_mem.go:75] "Updated machine memory state" Jul 11 00:35:03.271163 kubelet[1950]: E0711 00:35:03.271138 1950 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 11 00:35:03.270000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:03.270000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:35:03.270000 audit[1950]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e4e4e0 a1=4000eebed8 a2=4000e4e480 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:03.270000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:35:03.271372 kubelet[1950]: E0711 00:35:03.271203 1950 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 11 00:35:03.271397 kubelet[1950]: I0711 00:35:03.271368 1950 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:35:03.271419 kubelet[1950]: I0711 00:35:03.271381 1950 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:35:03.271604 kubelet[1950]: I0711 00:35:03.271587 1950 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:35:03.273786 kubelet[1950]: E0711 00:35:03.273165 1950 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 11 00:35:03.343524 kubelet[1950]: I0711 00:35:03.343417 1950 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:03.343915 kubelet[1950]: I0711 00:35:03.343898 1950 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:03.344452 kubelet[1950]: I0711 00:35:03.344432 1950 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:03.351657 kubelet[1950]: E0711 00:35:03.351513 1950 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:03.352057 kubelet[1950]: E0711 00:35:03.352014 1950 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:03.375176 kubelet[1950]: I0711 00:35:03.375152 1950 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:35:03.381882 kubelet[1950]: I0711 00:35:03.381675 1950 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 11 00:35:03.381882 kubelet[1950]: I0711 00:35:03.381763 1950 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 11 00:35:03.423767 kubelet[1950]: I0711 00:35:03.423721 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/662ef4319b679aa6ef2976494f77a62f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"662ef4319b679aa6ef2976494f77a62f\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:03.423767 kubelet[1950]: I0711 00:35:03.423765 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:03.423917 kubelet[1950]: I0711 00:35:03.423843 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:03.423917 kubelet[1950]: I0711 00:35:03.423877 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/662ef4319b679aa6ef2976494f77a62f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"662ef4319b679aa6ef2976494f77a62f\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:03.423917 kubelet[1950]: I0711 00:35:03.423902 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/662ef4319b679aa6ef2976494f77a62f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"662ef4319b679aa6ef2976494f77a62f\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:03.423991 kubelet[1950]: I0711 00:35:03.423926 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:03.423991 kubelet[1950]: I0711 00:35:03.423950 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:03.423991 kubelet[1950]: I0711 00:35:03.423967 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:03.424057 kubelet[1950]: I0711 00:35:03.424000 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:03.652547 kubelet[1950]: E0711 00:35:03.652444 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:03.652547 kubelet[1950]: E0711 00:35:03.652460 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:03.652547 kubelet[1950]: E0711 00:35:03.652545 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:04.196250 kubelet[1950]: I0711 00:35:04.196211 1950 apiserver.go:52] "Watching apiserver" Jul 11 00:35:04.222687 kubelet[1950]: I0711 00:35:04.222650 1950 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 11 00:35:04.255215 kubelet[1950]: I0711 00:35:04.255185 1950 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:04.255485 kubelet[1950]: I0711 00:35:04.255466 1950 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:04.255580 kubelet[1950]: I0711 00:35:04.255557 1950 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:04.262417 kubelet[1950]: E0711 00:35:04.262388 1950 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:35:04.262670 kubelet[1950]: E0711 00:35:04.262654 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:04.262766 kubelet[1950]: E0711 00:35:04.262732 1950 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:35:04.262887 kubelet[1950]: E0711 00:35:04.262695 1950 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 11 00:35:04.263032 kubelet[1950]: E0711 00:35:04.262889 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:04.263112 kubelet[1950]: E0711 00:35:04.263100 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:04.282908 kubelet[1950]: I0711 00:35:04.282819 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.282780715 podStartE2EDuration="2.282780715s" podCreationTimestamp="2025-07-11 00:35:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:35:04.275666082 +0000 UTC m=+1.136234710" watchObservedRunningTime="2025-07-11 00:35:04.282780715 +0000 UTC m=+1.143349343" Jul 11 00:35:04.289912 kubelet[1950]: I0711 00:35:04.289865 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.289854898 podStartE2EDuration="2.289854898s" podCreationTimestamp="2025-07-11 00:35:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:35:04.283236864 +0000 UTC m=+1.143805452" watchObservedRunningTime="2025-07-11 00:35:04.289854898 +0000 UTC m=+1.150423526" Jul 11 00:35:04.296678 kubelet[1950]: I0711 00:35:04.296634 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.296624901 podStartE2EDuration="1.296624901s" podCreationTimestamp="2025-07-11 00:35:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:35:04.290335029 +0000 UTC m=+1.150903657" watchObservedRunningTime="2025-07-11 00:35:04.296624901 +0000 UTC m=+1.157193529" Jul 11 00:35:05.256679 kubelet[1950]: E0711 00:35:05.256647 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:05.257089 kubelet[1950]: E0711 00:35:05.256655 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:05.257192 kubelet[1950]: E0711 00:35:05.256773 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:05.749000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 11 00:35:05.749000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40005e0400 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:05.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:06.257826 kubelet[1950]: E0711 00:35:06.257431 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:06.257826 kubelet[1950]: E0711 00:35:06.257516 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:06.257826 kubelet[1950]: E0711 00:35:06.257788 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:09.077435 kubelet[1950]: E0711 00:35:09.077403 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:09.261833 kubelet[1950]: E0711 00:35:09.261779 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:09.969000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.970825 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 11 00:35:09.970885 kernel: audit: type=1400 audit(1752194109.969:716): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.969000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.976359 kernel: audit: type=1400 audit(1752194109.969:717): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.976403 kernel: audit: type=1300 audit(1752194109.969:717): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bc3500 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.969000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bc3500 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:09.983148 kernel: audit: type=1327 audit(1752194109.969:717): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:09.983190 kernel: audit: type=1400 audit(1752194109.970:718): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.970000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.970000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bc3860 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.989543 kernel: audit: type=1300 audit(1752194109.970:718): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bc3860 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.989578 kernel: audit: type=1327 audit(1752194109.970:718): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:09.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:09.969000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001778aa0 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.996392 kernel: audit: type=1300 audit(1752194109.969:716): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001778aa0 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.996420 kernel: audit: type=1327 audit(1752194109.969:716): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:09.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:09.971000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:10.002340 kernel: audit: type=1400 audit(1752194109.971:719): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:35:09.971000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001778ac0 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:35:09.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:35:10.263449 kubelet[1950]: E0711 00:35:10.263364 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:10.636740 kubelet[1950]: I0711 00:35:10.636709 1950 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 11 00:35:10.637208 env[1218]: time="2025-07-11T00:35:10.637174122Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 11 00:35:10.637667 kubelet[1950]: I0711 00:35:10.637651 1950 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 11 00:35:11.593881 systemd[1]: Created slice kubepods-besteffort-pod387c5c47_07f0_4a0a_a89b_76457501556e.slice. Jul 11 00:35:11.678651 kubelet[1950]: I0711 00:35:11.678594 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/387c5c47-07f0-4a0a-a89b-76457501556e-lib-modules\") pod \"kube-proxy-5zqkk\" (UID: \"387c5c47-07f0-4a0a-a89b-76457501556e\") " pod="kube-system/kube-proxy-5zqkk" Jul 11 00:35:11.678651 kubelet[1950]: I0711 00:35:11.678646 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/387c5c47-07f0-4a0a-a89b-76457501556e-xtables-lock\") pod \"kube-proxy-5zqkk\" (UID: \"387c5c47-07f0-4a0a-a89b-76457501556e\") " pod="kube-system/kube-proxy-5zqkk" Jul 11 00:35:11.679004 kubelet[1950]: I0711 00:35:11.678664 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tf6tz\" (UniqueName: \"kubernetes.io/projected/387c5c47-07f0-4a0a-a89b-76457501556e-kube-api-access-tf6tz\") pod \"kube-proxy-5zqkk\" (UID: \"387c5c47-07f0-4a0a-a89b-76457501556e\") " pod="kube-system/kube-proxy-5zqkk" Jul 11 00:35:11.679004 kubelet[1950]: I0711 00:35:11.678682 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/387c5c47-07f0-4a0a-a89b-76457501556e-kube-proxy\") pod \"kube-proxy-5zqkk\" (UID: \"387c5c47-07f0-4a0a-a89b-76457501556e\") " pod="kube-system/kube-proxy-5zqkk" Jul 11 00:35:11.738009 systemd[1]: Created slice kubepods-besteffort-pod2153d0bc_ec3d_4d2b_8b59_96336ef195e4.slice. Jul 11 00:35:11.778948 kubelet[1950]: I0711 00:35:11.778895 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/2153d0bc-ec3d-4d2b-8b59-96336ef195e4-var-lib-calico\") pod \"tigera-operator-747864d56d-9nvn6\" (UID: \"2153d0bc-ec3d-4d2b-8b59-96336ef195e4\") " pod="tigera-operator/tigera-operator-747864d56d-9nvn6" Jul 11 00:35:11.778948 kubelet[1950]: I0711 00:35:11.778934 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7rpbg\" (UniqueName: \"kubernetes.io/projected/2153d0bc-ec3d-4d2b-8b59-96336ef195e4-kube-api-access-7rpbg\") pod \"tigera-operator-747864d56d-9nvn6\" (UID: \"2153d0bc-ec3d-4d2b-8b59-96336ef195e4\") " pod="tigera-operator/tigera-operator-747864d56d-9nvn6" Jul 11 00:35:11.786227 kubelet[1950]: I0711 00:35:11.786175 1950 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 11 00:35:11.904671 kubelet[1950]: E0711 00:35:11.904585 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:11.905322 env[1218]: time="2025-07-11T00:35:11.905272241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5zqkk,Uid:387c5c47-07f0-4a0a-a89b-76457501556e,Namespace:kube-system,Attempt:0,}" Jul 11 00:35:11.926493 env[1218]: time="2025-07-11T00:35:11.926327005Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:11.926493 env[1218]: time="2025-07-11T00:35:11.926363250Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:11.926493 env[1218]: time="2025-07-11T00:35:11.926373371Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:11.926657 env[1218]: time="2025-07-11T00:35:11.926523871Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/83df98c0746d1f3ffbcb3d6d5387f58ed7ae946d8120b31d0acd916cb3e74cd8 pid=2010 runtime=io.containerd.runc.v2 Jul 11 00:35:11.939721 systemd[1]: Started cri-containerd-83df98c0746d1f3ffbcb3d6d5387f58ed7ae946d8120b31d0acd916cb3e74cd8.scope. Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit: BPF prog-id=106 op=LOAD Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2010 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:11.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833646639386330373436643166336666626362336436643533383766 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2010 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:11.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833646639386330373436643166336666626362336436643533383766 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit: BPF prog-id=107 op=LOAD Jul 11 00:35:11.958000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2010 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:11.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833646639386330373436643166336666626362336436643533383766 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit: BPF prog-id=108 op=LOAD Jul 11 00:35:11.958000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2010 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:11.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833646639386330373436643166336666626362336436643533383766 Jul 11 00:35:11.958000 audit: BPF prog-id=108 op=UNLOAD Jul 11 00:35:11.958000 audit: BPF prog-id=107 op=UNLOAD Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:11.958000 audit: BPF prog-id=109 op=LOAD Jul 11 00:35:11.958000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2010 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:11.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833646639386330373436643166336666626362336436643533383766 Jul 11 00:35:11.969636 env[1218]: time="2025-07-11T00:35:11.969597724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5zqkk,Uid:387c5c47-07f0-4a0a-a89b-76457501556e,Namespace:kube-system,Attempt:0,} returns sandbox id \"83df98c0746d1f3ffbcb3d6d5387f58ed7ae946d8120b31d0acd916cb3e74cd8\"" Jul 11 00:35:11.970249 kubelet[1950]: E0711 00:35:11.970227 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:11.975003 env[1218]: time="2025-07-11T00:35:11.974964019Z" level=info msg="CreateContainer within sandbox \"83df98c0746d1f3ffbcb3d6d5387f58ed7ae946d8120b31d0acd916cb3e74cd8\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 11 00:35:11.988002 env[1218]: time="2025-07-11T00:35:11.987961101Z" level=info msg="CreateContainer within sandbox \"83df98c0746d1f3ffbcb3d6d5387f58ed7ae946d8120b31d0acd916cb3e74cd8\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"45f66496a07db8c6c35f0227b883e8d014fbd476c59000b3ca259b23431b3733\"" Jul 11 00:35:11.988805 env[1218]: time="2025-07-11T00:35:11.988708597Z" level=info msg="StartContainer for \"45f66496a07db8c6c35f0227b883e8d014fbd476c59000b3ca259b23431b3733\"" Jul 11 00:35:12.003258 systemd[1]: Started cri-containerd-45f66496a07db8c6c35f0227b883e8d014fbd476c59000b3ca259b23431b3733.scope. Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2010 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435663636343936613037646238633663333566303232376238383365 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.026000 audit: BPF prog-id=110 op=LOAD Jul 11 00:35:12.026000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2010 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435663636343936613037646238633663333566303232376238383365 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit: BPF prog-id=111 op=LOAD Jul 11 00:35:12.027000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2010 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435663636343936613037646238633663333566303232376238383365 Jul 11 00:35:12.027000 audit: BPF prog-id=111 op=UNLOAD Jul 11 00:35:12.027000 audit: BPF prog-id=110 op=UNLOAD Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.027000 audit: BPF prog-id=112 op=LOAD Jul 11 00:35:12.027000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2010 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435663636343936613037646238633663333566303232376238383365 Jul 11 00:35:12.042399 env[1218]: time="2025-07-11T00:35:12.042359093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-9nvn6,Uid:2153d0bc-ec3d-4d2b-8b59-96336ef195e4,Namespace:tigera-operator,Attempt:0,}" Jul 11 00:35:12.044896 env[1218]: time="2025-07-11T00:35:12.044865040Z" level=info msg="StartContainer for \"45f66496a07db8c6c35f0227b883e8d014fbd476c59000b3ca259b23431b3733\" returns successfully" Jul 11 00:35:12.058990 env[1218]: time="2025-07-11T00:35:12.058823870Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:12.058990 env[1218]: time="2025-07-11T00:35:12.058863195Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:12.058990 env[1218]: time="2025-07-11T00:35:12.058873556Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:12.059133 env[1218]: time="2025-07-11T00:35:12.059039136Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b9775f4a9af4f34645870fee46f0ee2cea9db12dfc263afcbdc77db6fa63aa8 pid=2085 runtime=io.containerd.runc.v2 Jul 11 00:35:12.069868 systemd[1]: Started cri-containerd-1b9775f4a9af4f34645870fee46f0ee2cea9db12dfc263afcbdc77db6fa63aa8.scope. Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit: BPF prog-id=113 op=LOAD Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2085 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393737356634613961663466333436343538373066656534366630 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2085 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393737356634613961663466333436343538373066656534366630 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit: BPF prog-id=114 op=LOAD Jul 11 00:35:12.093000 audit[2095]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2085 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393737356634613961663466333436343538373066656534366630 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit: BPF prog-id=115 op=LOAD Jul 11 00:35:12.093000 audit[2095]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2085 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393737356634613961663466333436343538373066656534366630 Jul 11 00:35:12.093000 audit: BPF prog-id=115 op=UNLOAD Jul 11 00:35:12.093000 audit: BPF prog-id=114 op=UNLOAD Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { perfmon } for pid=2095 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit[2095]: AVC avc: denied { bpf } for pid=2095 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:12.093000 audit: BPF prog-id=116 op=LOAD Jul 11 00:35:12.093000 audit[2095]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2085 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393737356634613961663466333436343538373066656534366630 Jul 11 00:35:12.125379 env[1218]: time="2025-07-11T00:35:12.125322216Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-9nvn6,Uid:2153d0bc-ec3d-4d2b-8b59-96336ef195e4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"1b9775f4a9af4f34645870fee46f0ee2cea9db12dfc263afcbdc77db6fa63aa8\"" Jul 11 00:35:12.127132 env[1218]: time="2025-07-11T00:35:12.127099033Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 11 00:35:12.228000 audit[2153]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.228000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff241ed60 a2=0 a3=1 items=0 ppid=2063 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.228000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:35:12.228000 audit[2154]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.228000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1ca55b0 a2=0 a3=1 items=0 ppid=2063 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.228000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:35:12.229000 audit[2156]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.229000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff110b6d0 a2=0 a3=1 items=0 ppid=2063 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:35:12.229000 audit[2158]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.229000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf3f87b0 a2=0 a3=1 items=0 ppid=2063 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:35:12.232000 audit[2160]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.232000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0651b80 a2=0 a3=1 items=0 ppid=2063 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:35:12.233000 audit[2161]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.233000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff8cf2b90 a2=0 a3=1 items=0 ppid=2063 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.233000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:35:12.268533 kubelet[1950]: E0711 00:35:12.268506 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:12.333000 audit[2162]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.333000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc7f597a0 a2=0 a3=1 items=0 ppid=2063 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:35:12.335000 audit[2164]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.335000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffdd45cb0 a2=0 a3=1 items=0 ppid=2063 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 11 00:35:12.338000 audit[2167]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.338000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff5dbbfa0 a2=0 a3=1 items=0 ppid=2063 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 11 00:35:12.339000 audit[2168]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.339000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd85aa340 a2=0 a3=1 items=0 ppid=2063 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:35:12.341000 audit[2170]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.341000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff9f9d0c0 a2=0 a3=1 items=0 ppid=2063 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:35:12.342000 audit[2171]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.342000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0356310 a2=0 a3=1 items=0 ppid=2063 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:35:12.344000 audit[2173]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.344000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc340e9f0 a2=0 a3=1 items=0 ppid=2063 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:35:12.347000 audit[2176]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.347000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeda42050 a2=0 a3=1 items=0 ppid=2063 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 11 00:35:12.350000 audit[2177]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.350000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5460eb0 a2=0 a3=1 items=0 ppid=2063 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:35:12.353000 audit[2179]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.353000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7823ca0 a2=0 a3=1 items=0 ppid=2063 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:35:12.355000 audit[2180]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.355000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc3a98a10 a2=0 a3=1 items=0 ppid=2063 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:35:12.357000 audit[2182]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.357000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff0548610 a2=0 a3=1 items=0 ppid=2063 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.357000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:35:12.360000 audit[2185]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.360000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb8d9420 a2=0 a3=1 items=0 ppid=2063 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:35:12.363000 audit[2188]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.363000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcebffbe0 a2=0 a3=1 items=0 ppid=2063 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.363000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:35:12.364000 audit[2189]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.364000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc1837810 a2=0 a3=1 items=0 ppid=2063 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:35:12.367000 audit[2191]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.367000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff1bdc0f0 a2=0 a3=1 items=0 ppid=2063 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:35:12.371000 audit[2194]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.371000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffee47ca30 a2=0 a3=1 items=0 ppid=2063 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.371000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:35:12.372000 audit[2195]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.372000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffced1a820 a2=0 a3=1 items=0 ppid=2063 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.372000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:35:12.374000 audit[2197]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:35:12.374000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc0c9be20 a2=0 a3=1 items=0 ppid=2063 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.374000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:35:12.397000 audit[2203]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:12.397000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcb9e3ca0 a2=0 a3=1 items=0 ppid=2063 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.397000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:12.411000 audit[2203]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:12.411000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffcb9e3ca0 a2=0 a3=1 items=0 ppid=2063 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.411000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:12.412000 audit[2208]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.412000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcb630130 a2=0 a3=1 items=0 ppid=2063 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:35:12.414000 audit[2210]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.414000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff3270ae0 a2=0 a3=1 items=0 ppid=2063 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 11 00:35:12.418000 audit[2213]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.418000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd277a370 a2=0 a3=1 items=0 ppid=2063 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.418000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 11 00:35:12.419000 audit[2214]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.419000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc58bacf0 a2=0 a3=1 items=0 ppid=2063 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.419000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:35:12.421000 audit[2216]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.421000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcbba4220 a2=0 a3=1 items=0 ppid=2063 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:35:12.422000 audit[2217]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.422000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff32fe6e0 a2=0 a3=1 items=0 ppid=2063 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:35:12.424000 audit[2219]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.424000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe7b3e480 a2=0 a3=1 items=0 ppid=2063 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 11 00:35:12.427000 audit[2222]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.427000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd4c4b820 a2=0 a3=1 items=0 ppid=2063 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.427000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:35:12.428000 audit[2223]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.428000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe6e2760 a2=0 a3=1 items=0 ppid=2063 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:35:12.430000 audit[2225]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.430000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe17979a0 a2=0 a3=1 items=0 ppid=2063 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:35:12.431000 audit[2226]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.431000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda386b10 a2=0 a3=1 items=0 ppid=2063 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:35:12.433000 audit[2228]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.433000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffddbaed00 a2=0 a3=1 items=0 ppid=2063 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:35:12.436000 audit[2231]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.436000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc96f0470 a2=0 a3=1 items=0 ppid=2063 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.436000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:35:12.440000 audit[2234]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.440000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc2193ce0 a2=0 a3=1 items=0 ppid=2063 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 11 00:35:12.441000 audit[2235]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.441000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd5653b90 a2=0 a3=1 items=0 ppid=2063 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:35:12.443000 audit[2237]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.443000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff2003640 a2=0 a3=1 items=0 ppid=2063 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:35:12.446000 audit[2240]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.446000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff603f280 a2=0 a3=1 items=0 ppid=2063 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:35:12.447000 audit[2241]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.447000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea7a19d0 a2=0 a3=1 items=0 ppid=2063 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:35:12.448000 audit[2243]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.448000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffdb1543a0 a2=0 a3=1 items=0 ppid=2063 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.448000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:35:12.450000 audit[2244]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.450000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0963f30 a2=0 a3=1 items=0 ppid=2063 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.450000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:35:12.452000 audit[2246]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.452000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff00541c0 a2=0 a3=1 items=0 ppid=2063 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:35:12.455000 audit[2249]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:35:12.455000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeceed5d0 a2=0 a3=1 items=0 ppid=2063 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:35:12.459000 audit[2251]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:35:12.459000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffccd9da90 a2=0 a3=1 items=0 ppid=2063 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.459000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:12.459000 audit[2251]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:35:12.459000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffccd9da90 a2=0 a3=1 items=0 ppid=2063 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:12.459000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:13.342079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount606200156.mount: Deactivated successfully. Jul 11 00:35:13.988701 env[1218]: time="2025-07-11T00:35:13.988656087Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:13.989876 env[1218]: time="2025-07-11T00:35:13.989843345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:13.993902 env[1218]: time="2025-07-11T00:35:13.993870532Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:13.995568 env[1218]: time="2025-07-11T00:35:13.995542046Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:13.996078 env[1218]: time="2025-07-11T00:35:13.996048025Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 11 00:35:14.000342 env[1218]: time="2025-07-11T00:35:14.000307199Z" level=info msg="CreateContainer within sandbox \"1b9775f4a9af4f34645870fee46f0ee2cea9db12dfc263afcbdc77db6fa63aa8\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 11 00:35:14.010601 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3429263008.mount: Deactivated successfully. Jul 11 00:35:14.014941 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3953516326.mount: Deactivated successfully. Jul 11 00:35:14.018642 env[1218]: time="2025-07-11T00:35:14.018597014Z" level=info msg="CreateContainer within sandbox \"1b9775f4a9af4f34645870fee46f0ee2cea9db12dfc263afcbdc77db6fa63aa8\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"62f5b0d01ad0300cfb972aeab52f596569ad98ec4a4609f699049fc27c8194b8\"" Jul 11 00:35:14.019074 env[1218]: time="2025-07-11T00:35:14.019025181Z" level=info msg="StartContainer for \"62f5b0d01ad0300cfb972aeab52f596569ad98ec4a4609f699049fc27c8194b8\"" Jul 11 00:35:14.033722 systemd[1]: Started cri-containerd-62f5b0d01ad0300cfb972aeab52f596569ad98ec4a4609f699049fc27c8194b8.scope. Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.055000 audit: BPF prog-id=117 op=LOAD Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2085 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:14.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632663562306430316164303330306366623937326165616235326635 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2085 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:14.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632663562306430316164303330306366623937326165616235326635 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.056000 audit: BPF prog-id=118 op=LOAD Jul 11 00:35:14.056000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2085 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:14.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632663562306430316164303330306366623937326165616235326635 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.057000 audit: BPF prog-id=119 op=LOAD Jul 11 00:35:14.057000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2085 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:14.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632663562306430316164303330306366623937326165616235326635 Jul 11 00:35:14.057000 audit: BPF prog-id=119 op=UNLOAD Jul 11 00:35:14.057000 audit: BPF prog-id=118 op=UNLOAD Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:14.058000 audit: BPF prog-id=120 op=LOAD Jul 11 00:35:14.058000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2085 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:14.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632663562306430316164303330306366623937326165616235326635 Jul 11 00:35:14.070425 env[1218]: time="2025-07-11T00:35:14.070372868Z" level=info msg="StartContainer for \"62f5b0d01ad0300cfb972aeab52f596569ad98ec4a4609f699049fc27c8194b8\" returns successfully" Jul 11 00:35:14.293461 kubelet[1950]: I0711 00:35:14.293383 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-5zqkk" podStartSLOduration=3.293365311 podStartE2EDuration="3.293365311s" podCreationTimestamp="2025-07-11 00:35:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:35:12.284433067 +0000 UTC m=+9.145001775" watchObservedRunningTime="2025-07-11 00:35:14.293365311 +0000 UTC m=+11.153933939" Jul 11 00:35:15.076336 kubelet[1950]: E0711 00:35:15.076305 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:15.087068 kubelet[1950]: I0711 00:35:15.087013 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-9nvn6" podStartSLOduration=2.216459201 podStartE2EDuration="4.08699898s" podCreationTimestamp="2025-07-11 00:35:11 +0000 UTC" firstStartedPulling="2025-07-11 00:35:12.126621655 +0000 UTC m=+8.987190283" lastFinishedPulling="2025-07-11 00:35:13.997161434 +0000 UTC m=+10.857730062" observedRunningTime="2025-07-11 00:35:14.294133635 +0000 UTC m=+11.154702263" watchObservedRunningTime="2025-07-11 00:35:15.08699898 +0000 UTC m=+11.947567608" Jul 11 00:35:15.788615 kubelet[1950]: E0711 00:35:15.788587 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:16.283563 kubelet[1950]: E0711 00:35:16.278637 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:18.979697 update_engine[1208]: I0711 00:35:18.979637 1208 update_attempter.cc:509] Updating boot flags... Jul 11 00:35:19.413205 sudo[1354]: pam_unix(sudo:session): session closed for user root Jul 11 00:35:19.412000 audit[1354]: USER_END pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:35:19.414183 kernel: kauditd_printk_skb: 369 callbacks suppressed Jul 11 00:35:19.414280 kernel: audit: type=1106 audit(1752194119.412:831): pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:35:19.412000 audit[1354]: CRED_DISP pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:35:19.420246 kernel: audit: type=1104 audit(1752194119.412:832): pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:35:19.420755 sshd[1350]: pam_unix(sshd:session): session closed for user core Jul 11 00:35:19.421000 audit[1350]: USER_END pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:19.423000 audit[1350]: CRED_DISP pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:19.425541 systemd[1]: sshd@6-10.0.0.93:22-10.0.0.1:41292.service: Deactivated successfully. Jul 11 00:35:19.426236 systemd[1]: session-7.scope: Deactivated successfully. Jul 11 00:35:19.426405 systemd[1]: session-7.scope: Consumed 5.733s CPU time. Jul 11 00:35:19.428462 kernel: audit: type=1106 audit(1752194119.421:833): pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:19.428541 kernel: audit: type=1104 audit(1752194119.423:834): pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:19.429870 systemd-logind[1205]: Session 7 logged out. Waiting for processes to exit. Jul 11 00:35:19.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.93:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:19.433122 kernel: audit: type=1131 audit(1752194119.424:835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.93:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:19.433533 systemd-logind[1205]: Removed session 7. Jul 11 00:35:21.685000 audit[2360]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:21.685000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcb748e70 a2=0 a3=1 items=0 ppid=2063 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:21.692862 kernel: audit: type=1325 audit(1752194121.685:836): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:21.692952 kernel: audit: type=1300 audit(1752194121.685:836): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcb748e70 a2=0 a3=1 items=0 ppid=2063 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:21.685000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:21.695332 kernel: audit: type=1327 audit(1752194121.685:836): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:21.695000 audit[2360]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:21.697819 kernel: audit: type=1325 audit(1752194121.695:837): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:21.697891 kernel: audit: type=1300 audit(1752194121.695:837): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcb748e70 a2=0 a3=1 items=0 ppid=2063 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:21.695000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcb748e70 a2=0 a3=1 items=0 ppid=2063 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:21.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:21.729000 audit[2362]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:21.729000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe5250380 a2=0 a3=1 items=0 ppid=2063 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:21.729000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:21.737000 audit[2362]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:21.737000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe5250380 a2=0 a3=1 items=0 ppid=2063 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:21.737000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.874000 audit[2366]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.878471 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 11 00:35:25.878558 kernel: audit: type=1325 audit(1752194125.874:840): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.878576 kernel: audit: type=1300 audit(1752194125.874:840): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff5175600 a2=0 a3=1 items=0 ppid=2063 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.874000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff5175600 a2=0 a3=1 items=0 ppid=2063 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.874000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.884495 kernel: audit: type=1327 audit(1752194125.874:840): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.888000 audit[2366]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.888000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff5175600 a2=0 a3=1 items=0 ppid=2063 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.894757 kernel: audit: type=1325 audit(1752194125.888:841): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.894847 kernel: audit: type=1300 audit(1752194125.888:841): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff5175600 a2=0 a3=1 items=0 ppid=2063 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.894872 kernel: audit: type=1327 audit(1752194125.888:841): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.888000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.912463 systemd[1]: Created slice kubepods-besteffort-podd68ad015_9b4e_448d_b7db_3046346beeed.slice. Jul 11 00:35:25.945000 audit[2368]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.945000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe61c6030 a2=0 a3=1 items=0 ppid=2063 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.953089 kernel: audit: type=1325 audit(1752194125.945:842): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.953173 kernel: audit: type=1300 audit(1752194125.945:842): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe61c6030 a2=0 a3=1 items=0 ppid=2063 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.953198 kernel: audit: type=1327 audit(1752194125.945:842): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.945000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.957000 audit[2368]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.957000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe61c6030 a2=0 a3=1 items=0 ppid=2063 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:25.957000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:25.960802 kernel: audit: type=1325 audit(1752194125.957:843): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:25.983326 kubelet[1950]: I0711 00:35:25.983284 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/d68ad015-9b4e-448d-b7db-3046346beeed-typha-certs\") pod \"calico-typha-c54cc8b49-mmhk7\" (UID: \"d68ad015-9b4e-448d-b7db-3046346beeed\") " pod="calico-system/calico-typha-c54cc8b49-mmhk7" Jul 11 00:35:25.983612 kubelet[1950]: I0711 00:35:25.983338 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d68ad015-9b4e-448d-b7db-3046346beeed-tigera-ca-bundle\") pod \"calico-typha-c54cc8b49-mmhk7\" (UID: \"d68ad015-9b4e-448d-b7db-3046346beeed\") " pod="calico-system/calico-typha-c54cc8b49-mmhk7" Jul 11 00:35:25.983612 kubelet[1950]: I0711 00:35:25.983358 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fsx2b\" (UniqueName: \"kubernetes.io/projected/d68ad015-9b4e-448d-b7db-3046346beeed-kube-api-access-fsx2b\") pod \"calico-typha-c54cc8b49-mmhk7\" (UID: \"d68ad015-9b4e-448d-b7db-3046346beeed\") " pod="calico-system/calico-typha-c54cc8b49-mmhk7" Jul 11 00:35:26.084317 systemd[1]: Created slice kubepods-besteffort-pod54e507f6_e01e_46fc_86b0_10fc70d2f2b2.slice. Jul 11 00:35:26.184698 kubelet[1950]: I0711 00:35:26.184583 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-var-run-calico\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184698 kubelet[1950]: I0711 00:35:26.184625 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-lib-modules\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184698 kubelet[1950]: I0711 00:35:26.184642 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-xtables-lock\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184698 kubelet[1950]: I0711 00:35:26.184662 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-var-lib-calico\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184698 kubelet[1950]: I0711 00:35:26.184691 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-cni-net-dir\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184958 kubelet[1950]: I0711 00:35:26.184730 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-cni-log-dir\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184958 kubelet[1950]: I0711 00:35:26.184756 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-policysync\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184958 kubelet[1950]: I0711 00:35:26.184774 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-tigera-ca-bundle\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184958 kubelet[1950]: I0711 00:35:26.184816 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-cni-bin-dir\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.184958 kubelet[1950]: I0711 00:35:26.184846 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-flexvol-driver-host\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.185086 kubelet[1950]: I0711 00:35:26.184886 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7mzqw\" (UniqueName: \"kubernetes.io/projected/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-kube-api-access-7mzqw\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.185086 kubelet[1950]: I0711 00:35:26.184925 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/54e507f6-e01e-46fc-86b0-10fc70d2f2b2-node-certs\") pod \"calico-node-lfz7j\" (UID: \"54e507f6-e01e-46fc-86b0-10fc70d2f2b2\") " pod="calico-system/calico-node-lfz7j" Jul 11 00:35:26.215099 kubelet[1950]: E0711 00:35:26.215057 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:26.215552 env[1218]: time="2025-07-11T00:35:26.215505243Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-c54cc8b49-mmhk7,Uid:d68ad015-9b4e-448d-b7db-3046346beeed,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:26.227977 env[1218]: time="2025-07-11T00:35:26.227910239Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:26.228132 env[1218]: time="2025-07-11T00:35:26.228107891Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:26.228214 env[1218]: time="2025-07-11T00:35:26.228195016Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:26.228461 env[1218]: time="2025-07-11T00:35:26.228430631Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e7a46e302302e486585e2bb427575d9dee65d16c6dfaf0ef5b9313cce109c8d0 pid=2378 runtime=io.containerd.runc.v2 Jul 11 00:35:26.261756 systemd[1]: Started cri-containerd-e7a46e302302e486585e2bb427575d9dee65d16c6dfaf0ef5b9313cce109c8d0.scope. Jul 11 00:35:26.291353 kubelet[1950]: E0711 00:35:26.291326 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.291489 kubelet[1950]: W0711 00:35:26.291474 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.291632 kubelet[1950]: E0711 00:35:26.291615 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.306907 kubelet[1950]: E0711 00:35:26.306878 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.307046 kubelet[1950]: W0711 00:35:26.307030 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.307112 kubelet[1950]: E0711 00:35:26.307100 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.327000 audit: BPF prog-id=121 op=LOAD Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2378 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613436653330323330326534383635383565326262343237353735 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2378 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613436653330323330326534383635383565326262343237353735 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit: BPF prog-id=122 op=LOAD Jul 11 00:35:26.328000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2378 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613436653330323330326534383635383565326262343237353735 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.328000 audit: BPF prog-id=123 op=LOAD Jul 11 00:35:26.328000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2378 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613436653330323330326534383635383565326262343237353735 Jul 11 00:35:26.329000 audit: BPF prog-id=123 op=UNLOAD Jul 11 00:35:26.329000 audit: BPF prog-id=122 op=UNLOAD Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.329000 audit: BPF prog-id=124 op=LOAD Jul 11 00:35:26.329000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2378 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613436653330323330326534383635383565326262343237353735 Jul 11 00:35:26.361381 kubelet[1950]: E0711 00:35:26.361329 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f6xhd" podUID="aa53afce-7b9d-4eee-a957-d67d4ca745f5" Jul 11 00:35:26.370909 kubelet[1950]: E0711 00:35:26.370884 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.371246 kubelet[1950]: W0711 00:35:26.371230 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.371438 kubelet[1950]: E0711 00:35:26.371424 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.371877 kubelet[1950]: E0711 00:35:26.371861 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.373605 kubelet[1950]: W0711 00:35:26.371970 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.374509 kubelet[1950]: E0711 00:35:26.374485 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.374884 kubelet[1950]: E0711 00:35:26.374862 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.374992 kubelet[1950]: W0711 00:35:26.374978 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.375118 kubelet[1950]: E0711 00:35:26.375100 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.376098 kubelet[1950]: E0711 00:35:26.376073 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.376195 kubelet[1950]: W0711 00:35:26.376181 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.376285 kubelet[1950]: E0711 00:35:26.376273 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.376572 kubelet[1950]: E0711 00:35:26.376560 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.376673 kubelet[1950]: W0711 00:35:26.376660 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.376751 kubelet[1950]: E0711 00:35:26.376739 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.377081 kubelet[1950]: E0711 00:35:26.377068 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.377181 kubelet[1950]: W0711 00:35:26.377162 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.377244 kubelet[1950]: E0711 00:35:26.377233 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.377584 kubelet[1950]: E0711 00:35:26.377571 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.377669 kubelet[1950]: W0711 00:35:26.377657 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.377743 kubelet[1950]: E0711 00:35:26.377721 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.378060 kubelet[1950]: E0711 00:35:26.378047 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.378171 kubelet[1950]: W0711 00:35:26.378157 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.378270 kubelet[1950]: E0711 00:35:26.378248 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.378580 kubelet[1950]: E0711 00:35:26.378552 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.378682 kubelet[1950]: W0711 00:35:26.378668 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.378777 kubelet[1950]: E0711 00:35:26.378764 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.380143 env[1218]: time="2025-07-11T00:35:26.380105037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-c54cc8b49-mmhk7,Uid:d68ad015-9b4e-448d-b7db-3046346beeed,Namespace:calico-system,Attempt:0,} returns sandbox id \"e7a46e302302e486585e2bb427575d9dee65d16c6dfaf0ef5b9313cce109c8d0\"" Jul 11 00:35:26.382981 kubelet[1950]: E0711 00:35:26.382925 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.382981 kubelet[1950]: W0711 00:35:26.382943 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.382981 kubelet[1950]: E0711 00:35:26.382956 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.383256 kubelet[1950]: E0711 00:35:26.383174 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.383256 kubelet[1950]: W0711 00:35:26.383184 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.383256 kubelet[1950]: E0711 00:35:26.383192 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.383343 kubelet[1950]: E0711 00:35:26.383327 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.383370 kubelet[1950]: W0711 00:35:26.383343 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.383370 kubelet[1950]: E0711 00:35:26.383352 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.383533 kubelet[1950]: E0711 00:35:26.383513 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.383533 kubelet[1950]: W0711 00:35:26.383526 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.383608 kubelet[1950]: E0711 00:35:26.383535 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.383679 kubelet[1950]: E0711 00:35:26.383662 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.383679 kubelet[1950]: W0711 00:35:26.383678 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.383748 kubelet[1950]: E0711 00:35:26.383688 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.383863 kubelet[1950]: E0711 00:35:26.383844 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.383863 kubelet[1950]: W0711 00:35:26.383858 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.383926 kubelet[1950]: E0711 00:35:26.383867 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.384026 kubelet[1950]: E0711 00:35:26.384003 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.384026 kubelet[1950]: W0711 00:35:26.384020 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.384084 kubelet[1950]: E0711 00:35:26.384031 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.384196 kubelet[1950]: E0711 00:35:26.384173 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.384196 kubelet[1950]: W0711 00:35:26.384190 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.384196 kubelet[1950]: E0711 00:35:26.384198 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.384340 kubelet[1950]: E0711 00:35:26.384322 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.384340 kubelet[1950]: W0711 00:35:26.384334 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.384398 kubelet[1950]: E0711 00:35:26.384349 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.385002 kubelet[1950]: E0711 00:35:26.384982 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:26.385509 kubelet[1950]: E0711 00:35:26.385399 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.385509 kubelet[1950]: W0711 00:35:26.385411 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.385806 kubelet[1950]: E0711 00:35:26.385768 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.386106 kubelet[1950]: E0711 00:35:26.386015 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.386106 kubelet[1950]: W0711 00:35:26.386032 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.386106 kubelet[1950]: E0711 00:35:26.386055 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.386973 kubelet[1950]: E0711 00:35:26.386949 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.387055 kubelet[1950]: W0711 00:35:26.386980 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.387055 kubelet[1950]: E0711 00:35:26.386993 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.387055 kubelet[1950]: I0711 00:35:26.387020 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/aa53afce-7b9d-4eee-a957-d67d4ca745f5-socket-dir\") pod \"csi-node-driver-f6xhd\" (UID: \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\") " pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:26.387149 env[1218]: time="2025-07-11T00:35:26.386973296Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 11 00:35:26.387326 kubelet[1950]: E0711 00:35:26.387206 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.387326 kubelet[1950]: W0711 00:35:26.387221 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.387326 kubelet[1950]: E0711 00:35:26.387232 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.387326 kubelet[1950]: I0711 00:35:26.387246 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/aa53afce-7b9d-4eee-a957-d67d4ca745f5-varrun\") pod \"csi-node-driver-f6xhd\" (UID: \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\") " pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:26.387717 kubelet[1950]: E0711 00:35:26.387502 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.387717 kubelet[1950]: W0711 00:35:26.387516 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.387717 kubelet[1950]: E0711 00:35:26.387528 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.388473 kubelet[1950]: E0711 00:35:26.388455 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.389149 kubelet[1950]: W0711 00:35:26.388558 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.389149 kubelet[1950]: E0711 00:35:26.388577 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.389541 env[1218]: time="2025-07-11T00:35:26.389507690Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lfz7j,Uid:54e507f6-e01e-46fc-86b0-10fc70d2f2b2,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:26.390660 kubelet[1950]: E0711 00:35:26.390630 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.390660 kubelet[1950]: W0711 00:35:26.390647 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.390660 kubelet[1950]: E0711 00:35:26.390660 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.390931 kubelet[1950]: I0711 00:35:26.390687 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q85fk\" (UniqueName: \"kubernetes.io/projected/aa53afce-7b9d-4eee-a957-d67d4ca745f5-kube-api-access-q85fk\") pod \"csi-node-driver-f6xhd\" (UID: \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\") " pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:26.391157 kubelet[1950]: E0711 00:35:26.391139 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.391157 kubelet[1950]: W0711 00:35:26.391155 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.391242 kubelet[1950]: E0711 00:35:26.391169 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.391357 kubelet[1950]: E0711 00:35:26.391338 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.391357 kubelet[1950]: W0711 00:35:26.391350 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.391357 kubelet[1950]: E0711 00:35:26.391358 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.392063 kubelet[1950]: E0711 00:35:26.392029 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.392063 kubelet[1950]: W0711 00:35:26.392050 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.392063 kubelet[1950]: E0711 00:35:26.392062 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.392235 kubelet[1950]: I0711 00:35:26.392080 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/aa53afce-7b9d-4eee-a957-d67d4ca745f5-kubelet-dir\") pod \"csi-node-driver-f6xhd\" (UID: \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\") " pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:26.392328 kubelet[1950]: E0711 00:35:26.392307 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.392328 kubelet[1950]: W0711 00:35:26.392323 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.392434 kubelet[1950]: E0711 00:35:26.392335 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.392473 kubelet[1950]: I0711 00:35:26.392412 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/aa53afce-7b9d-4eee-a957-d67d4ca745f5-registration-dir\") pod \"csi-node-driver-f6xhd\" (UID: \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\") " pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:26.392636 kubelet[1950]: E0711 00:35:26.392618 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.392636 kubelet[1950]: W0711 00:35:26.392631 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.392720 kubelet[1950]: E0711 00:35:26.392641 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.392939 kubelet[1950]: E0711 00:35:26.392924 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.392985 kubelet[1950]: W0711 00:35:26.392940 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.392985 kubelet[1950]: E0711 00:35:26.392960 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.393207 kubelet[1950]: E0711 00:35:26.393179 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.393207 kubelet[1950]: W0711 00:35:26.393206 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.393287 kubelet[1950]: E0711 00:35:26.393216 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.393845 kubelet[1950]: E0711 00:35:26.393824 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.393845 kubelet[1950]: W0711 00:35:26.393842 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.394013 kubelet[1950]: E0711 00:35:26.393853 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.394123 kubelet[1950]: E0711 00:35:26.394106 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.394165 kubelet[1950]: W0711 00:35:26.394120 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.394165 kubelet[1950]: E0711 00:35:26.394145 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.394366 kubelet[1950]: E0711 00:35:26.394351 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.394451 kubelet[1950]: W0711 00:35:26.394376 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.394451 kubelet[1950]: E0711 00:35:26.394387 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.409905 env[1218]: time="2025-07-11T00:35:26.409779246Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:26.409905 env[1218]: time="2025-07-11T00:35:26.409897893Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:26.410075 env[1218]: time="2025-07-11T00:35:26.409924895Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:26.410153 env[1218]: time="2025-07-11T00:35:26.410118587Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f pid=2456 runtime=io.containerd.runc.v2 Jul 11 00:35:26.420844 systemd[1]: Started cri-containerd-18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f.scope. Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit: BPF prog-id=125 op=LOAD Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2456 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138303330623330373463323332336639316130356433343035343265 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2456 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138303330623330373463323332336639316130356433343035343265 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.448000 audit: BPF prog-id=126 op=LOAD Jul 11 00:35:26.448000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2456 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138303330623330373463323332336639316130356433343035343265 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit: BPF prog-id=127 op=LOAD Jul 11 00:35:26.449000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2456 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138303330623330373463323332336639316130356433343035343265 Jul 11 00:35:26.449000 audit: BPF prog-id=127 op=UNLOAD Jul 11 00:35:26.449000 audit: BPF prog-id=126 op=UNLOAD Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:26.449000 audit: BPF prog-id=128 op=LOAD Jul 11 00:35:26.449000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2456 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138303330623330373463323332336639316130356433343035343265 Jul 11 00:35:26.471176 env[1218]: time="2025-07-11T00:35:26.471127826Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lfz7j,Uid:54e507f6-e01e-46fc-86b0-10fc70d2f2b2,Namespace:calico-system,Attempt:0,} returns sandbox id \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\"" Jul 11 00:35:26.493745 kubelet[1950]: E0711 00:35:26.493698 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.493745 kubelet[1950]: W0711 00:35:26.493722 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.493745 kubelet[1950]: E0711 00:35:26.493749 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.494003 kubelet[1950]: E0711 00:35:26.493987 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.494003 kubelet[1950]: W0711 00:35:26.494003 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.494083 kubelet[1950]: E0711 00:35:26.494015 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.494251 kubelet[1950]: E0711 00:35:26.494239 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.494251 kubelet[1950]: W0711 00:35:26.494251 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.494318 kubelet[1950]: E0711 00:35:26.494262 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.494462 kubelet[1950]: E0711 00:35:26.494451 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.494462 kubelet[1950]: W0711 00:35:26.494462 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.494532 kubelet[1950]: E0711 00:35:26.494471 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.494669 kubelet[1950]: E0711 00:35:26.494653 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.494669 kubelet[1950]: W0711 00:35:26.494664 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.494754 kubelet[1950]: E0711 00:35:26.494673 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.494912 kubelet[1950]: E0711 00:35:26.494847 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.494912 kubelet[1950]: W0711 00:35:26.494859 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.494912 kubelet[1950]: E0711 00:35:26.494867 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.495136 kubelet[1950]: E0711 00:35:26.495054 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.495136 kubelet[1950]: W0711 00:35:26.495064 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.495136 kubelet[1950]: E0711 00:35:26.495072 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.495345 kubelet[1950]: E0711 00:35:26.495213 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.495345 kubelet[1950]: W0711 00:35:26.495220 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.495345 kubelet[1950]: E0711 00:35:26.495226 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.495424 kubelet[1950]: E0711 00:35:26.495392 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.495424 kubelet[1950]: W0711 00:35:26.495399 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.495424 kubelet[1950]: E0711 00:35:26.495414 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.495613 kubelet[1950]: E0711 00:35:26.495549 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.495613 kubelet[1950]: W0711 00:35:26.495566 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.495613 kubelet[1950]: E0711 00:35:26.495574 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.502918 kubelet[1950]: E0711 00:35:26.502881 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.502918 kubelet[1950]: W0711 00:35:26.502907 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.502918 kubelet[1950]: E0711 00:35:26.502922 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.505018 kubelet[1950]: E0711 00:35:26.504978 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.505018 kubelet[1950]: W0711 00:35:26.504995 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.505018 kubelet[1950]: E0711 00:35:26.505009 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.506122 kubelet[1950]: E0711 00:35:26.506064 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.506122 kubelet[1950]: W0711 00:35:26.506085 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.506122 kubelet[1950]: E0711 00:35:26.506098 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.507982 kubelet[1950]: E0711 00:35:26.507959 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.507982 kubelet[1950]: W0711 00:35:26.507976 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.508091 kubelet[1950]: E0711 00:35:26.507992 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.508185 kubelet[1950]: E0711 00:35:26.508170 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.508185 kubelet[1950]: W0711 00:35:26.508184 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.508255 kubelet[1950]: E0711 00:35:26.508193 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.508431 kubelet[1950]: E0711 00:35:26.508409 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.508431 kubelet[1950]: W0711 00:35:26.508425 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.508547 kubelet[1950]: E0711 00:35:26.508436 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.508621 kubelet[1950]: E0711 00:35:26.508607 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.508621 kubelet[1950]: W0711 00:35:26.508619 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.508685 kubelet[1950]: E0711 00:35:26.508628 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.508918 kubelet[1950]: E0711 00:35:26.508903 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.508918 kubelet[1950]: W0711 00:35:26.508917 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.508992 kubelet[1950]: E0711 00:35:26.508927 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.509394 kubelet[1950]: E0711 00:35:26.509250 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.509394 kubelet[1950]: W0711 00:35:26.509265 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.509394 kubelet[1950]: E0711 00:35:26.509279 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.509884 kubelet[1950]: E0711 00:35:26.509628 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.509884 kubelet[1950]: W0711 00:35:26.509642 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.509884 kubelet[1950]: E0711 00:35:26.509655 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.510212 kubelet[1950]: E0711 00:35:26.510056 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.510212 kubelet[1950]: W0711 00:35:26.510068 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.510212 kubelet[1950]: E0711 00:35:26.510079 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.510560 kubelet[1950]: E0711 00:35:26.510421 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.510560 kubelet[1950]: W0711 00:35:26.510434 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.510560 kubelet[1950]: E0711 00:35:26.510444 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.510859 kubelet[1950]: E0711 00:35:26.510728 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.510859 kubelet[1950]: W0711 00:35:26.510750 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.510859 kubelet[1950]: E0711 00:35:26.510761 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.511128 kubelet[1950]: E0711 00:35:26.511011 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.511128 kubelet[1950]: W0711 00:35:26.511022 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.511128 kubelet[1950]: E0711 00:35:26.511033 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.511506 kubelet[1950]: E0711 00:35:26.511272 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.511506 kubelet[1950]: W0711 00:35:26.511283 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.511506 kubelet[1950]: E0711 00:35:26.511292 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.521383 kubelet[1950]: E0711 00:35:26.521364 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:26.521519 kubelet[1950]: W0711 00:35:26.521503 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:26.521583 kubelet[1950]: E0711 00:35:26.521570 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:26.971000 audit[2517]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:26.971000 audit[2517]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffcf9165f0 a2=0 a3=1 items=0 ppid=2063 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.971000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:26.984000 audit[2517]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:26.984000 audit[2517]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcf9165f0 a2=0 a3=1 items=0 ppid=2063 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:26.984000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:27.531207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2145749199.mount: Deactivated successfully. Jul 11 00:35:28.246409 kubelet[1950]: E0711 00:35:28.246359 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f6xhd" podUID="aa53afce-7b9d-4eee-a957-d67d4ca745f5" Jul 11 00:35:28.325348 env[1218]: time="2025-07-11T00:35:28.325258273Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:28.326036 env[1218]: time="2025-07-11T00:35:28.326009115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:28.326587 env[1218]: time="2025-07-11T00:35:28.326556906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:28.328739 env[1218]: time="2025-07-11T00:35:28.328698905Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:28.329382 env[1218]: time="2025-07-11T00:35:28.329351182Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 11 00:35:28.330824 env[1218]: time="2025-07-11T00:35:28.330784102Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 11 00:35:28.375581 env[1218]: time="2025-07-11T00:35:28.375519242Z" level=info msg="CreateContainer within sandbox \"e7a46e302302e486585e2bb427575d9dee65d16c6dfaf0ef5b9313cce109c8d0\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 11 00:35:28.391626 env[1218]: time="2025-07-11T00:35:28.391585460Z" level=info msg="CreateContainer within sandbox \"e7a46e302302e486585e2bb427575d9dee65d16c6dfaf0ef5b9313cce109c8d0\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"2d7b87849d32101d05992ae905240bc805e949accd8ee3e846a3d8db9eb2a861\"" Jul 11 00:35:28.392483 env[1218]: time="2025-07-11T00:35:28.392455428Z" level=info msg="StartContainer for \"2d7b87849d32101d05992ae905240bc805e949accd8ee3e846a3d8db9eb2a861\"" Jul 11 00:35:28.420653 systemd[1]: Started cri-containerd-2d7b87849d32101d05992ae905240bc805e949accd8ee3e846a3d8db9eb2a861.scope. Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.459000 audit: BPF prog-id=129 op=LOAD Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2378 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:28.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264376238373834396433323130316430353939326165393035323430 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2378 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:28.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264376238373834396433323130316430353939326165393035323430 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit: BPF prog-id=130 op=LOAD Jul 11 00:35:28.460000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2378 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:28.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264376238373834396433323130316430353939326165393035323430 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit: BPF prog-id=131 op=LOAD Jul 11 00:35:28.460000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2378 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:28.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264376238373834396433323130316430353939326165393035323430 Jul 11 00:35:28.460000 audit: BPF prog-id=131 op=UNLOAD Jul 11 00:35:28.460000 audit: BPF prog-id=130 op=UNLOAD Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:28.460000 audit: BPF prog-id=132 op=LOAD Jul 11 00:35:28.460000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2378 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:28.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264376238373834396433323130316430353939326165393035323430 Jul 11 00:35:28.484542 env[1218]: time="2025-07-11T00:35:28.484478651Z" level=info msg="StartContainer for \"2d7b87849d32101d05992ae905240bc805e949accd8ee3e846a3d8db9eb2a861\" returns successfully" Jul 11 00:35:29.331213 kubelet[1950]: E0711 00:35:29.331126 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:29.344650 kubelet[1950]: I0711 00:35:29.344580 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-c54cc8b49-mmhk7" podStartSLOduration=2.4002364480000002 podStartE2EDuration="4.344568688s" podCreationTimestamp="2025-07-11 00:35:25 +0000 UTC" firstStartedPulling="2025-07-11 00:35:26.386022238 +0000 UTC m=+23.246590826" lastFinishedPulling="2025-07-11 00:35:28.330354478 +0000 UTC m=+25.190923066" observedRunningTime="2025-07-11 00:35:29.344213149 +0000 UTC m=+26.204781817" watchObservedRunningTime="2025-07-11 00:35:29.344568688 +0000 UTC m=+26.205137316" Jul 11 00:35:29.359322 env[1218]: time="2025-07-11T00:35:29.359284277Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:29.361815 env[1218]: time="2025-07-11T00:35:29.361772770Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:29.363703 env[1218]: time="2025-07-11T00:35:29.363674072Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:29.365658 env[1218]: time="2025-07-11T00:35:29.365629417Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:29.366315 env[1218]: time="2025-07-11T00:35:29.366285532Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 11 00:35:29.370265 env[1218]: time="2025-07-11T00:35:29.370234024Z" level=info msg="CreateContainer within sandbox \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 11 00:35:29.380475 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2577924581.mount: Deactivated successfully. Jul 11 00:35:29.384800 env[1218]: time="2025-07-11T00:35:29.384751081Z" level=info msg="CreateContainer within sandbox \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88\"" Jul 11 00:35:29.385212 env[1218]: time="2025-07-11T00:35:29.385189585Z" level=info msg="StartContainer for \"ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88\"" Jul 11 00:35:29.406086 systemd[1]: Started cri-containerd-ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88.scope. Jul 11 00:35:29.427518 kubelet[1950]: E0711 00:35:29.427391 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.427518 kubelet[1950]: W0711 00:35:29.427413 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.427518 kubelet[1950]: E0711 00:35:29.427431 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.427909 kubelet[1950]: E0711 00:35:29.427741 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.427909 kubelet[1950]: W0711 00:35:29.427755 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.427909 kubelet[1950]: E0711 00:35:29.427818 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.428167 kubelet[1950]: E0711 00:35:29.428068 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.428167 kubelet[1950]: W0711 00:35:29.428081 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.428167 kubelet[1950]: E0711 00:35:29.428091 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.428447 kubelet[1950]: E0711 00:35:29.428330 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.428447 kubelet[1950]: W0711 00:35:29.428343 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.428447 kubelet[1950]: E0711 00:35:29.428352 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.428704 kubelet[1950]: E0711 00:35:29.428610 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.428704 kubelet[1950]: W0711 00:35:29.428622 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.428704 kubelet[1950]: E0711 00:35:29.428632 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.429032 kubelet[1950]: E0711 00:35:29.428928 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.429032 kubelet[1950]: W0711 00:35:29.428941 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.429032 kubelet[1950]: E0711 00:35:29.428952 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.429288 kubelet[1950]: E0711 00:35:29.429188 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.429288 kubelet[1950]: W0711 00:35:29.429200 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.429288 kubelet[1950]: E0711 00:35:29.429210 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.429559 kubelet[1950]: E0711 00:35:29.429440 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.429559 kubelet[1950]: W0711 00:35:29.429453 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.429559 kubelet[1950]: E0711 00:35:29.429462 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.429812 kubelet[1950]: E0711 00:35:29.429703 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.429812 kubelet[1950]: W0711 00:35:29.429715 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.429812 kubelet[1950]: E0711 00:35:29.429724 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.430085 kubelet[1950]: E0711 00:35:29.429985 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.430085 kubelet[1950]: W0711 00:35:29.429999 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.430085 kubelet[1950]: E0711 00:35:29.430010 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.430326 kubelet[1950]: E0711 00:35:29.430232 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.430326 kubelet[1950]: W0711 00:35:29.430245 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.430326 kubelet[1950]: E0711 00:35:29.430254 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.430579 kubelet[1950]: E0711 00:35:29.430473 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.430579 kubelet[1950]: W0711 00:35:29.430485 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.430579 kubelet[1950]: E0711 00:35:29.430494 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.430830 kubelet[1950]: E0711 00:35:29.430720 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.430830 kubelet[1950]: W0711 00:35:29.430732 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.430830 kubelet[1950]: E0711 00:35:29.430743 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.431102 kubelet[1950]: E0711 00:35:29.431003 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.431102 kubelet[1950]: W0711 00:35:29.431016 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.431102 kubelet[1950]: E0711 00:35:29.431026 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.431435 kubelet[1950]: E0711 00:35:29.431246 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.431435 kubelet[1950]: W0711 00:35:29.431258 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.431435 kubelet[1950]: E0711 00:35:29.431267 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.431611 kubelet[1950]: E0711 00:35:29.431598 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.431673 kubelet[1950]: W0711 00:35:29.431662 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.431733 kubelet[1950]: E0711 00:35:29.431722 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.431988 kubelet[1950]: E0711 00:35:29.431972 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.432082 kubelet[1950]: W0711 00:35:29.432067 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.432146 kubelet[1950]: E0711 00:35:29.432134 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.432385 kubelet[1950]: E0711 00:35:29.432371 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.432469 kubelet[1950]: W0711 00:35:29.432456 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.432524 kubelet[1950]: E0711 00:35:29.432513 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.432766 kubelet[1950]: E0711 00:35:29.432751 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.432913 kubelet[1950]: W0711 00:35:29.432898 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.432979 kubelet[1950]: E0711 00:35:29.432967 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.433245 kubelet[1950]: E0711 00:35:29.433230 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.433328 kubelet[1950]: W0711 00:35:29.433316 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.433388 kubelet[1950]: E0711 00:35:29.433377 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.433630 kubelet[1950]: E0711 00:35:29.433616 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.433714 kubelet[1950]: W0711 00:35:29.433701 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.433772 kubelet[1950]: E0711 00:35:29.433761 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.434052 kubelet[1950]: E0711 00:35:29.434037 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.434135 kubelet[1950]: W0711 00:35:29.434123 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.434195 kubelet[1950]: E0711 00:35:29.434184 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.434439 kubelet[1950]: E0711 00:35:29.434427 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.434508 kubelet[1950]: W0711 00:35:29.434496 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.434583 kubelet[1950]: E0711 00:35:29.434570 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.434902 kubelet[1950]: E0711 00:35:29.434878 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.434991 kubelet[1950]: W0711 00:35:29.434977 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.435052 kubelet[1950]: E0711 00:35:29.435041 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.435433 kubelet[1950]: E0711 00:35:29.435419 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.435512 kubelet[1950]: W0711 00:35:29.435499 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.435578 kubelet[1950]: E0711 00:35:29.435567 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2456 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:29.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303236633933626334333436616635373635303938326164326438 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.433000 audit: BPF prog-id=133 op=LOAD Jul 11 00:35:29.433000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2456 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:29.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303236633933626334333436616635373635303938326164326438 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit: BPF prog-id=134 op=LOAD Jul 11 00:35:29.434000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2456 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:29.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303236633933626334333436616635373635303938326164326438 Jul 11 00:35:29.434000 audit: BPF prog-id=134 op=UNLOAD Jul 11 00:35:29.434000 audit: BPF prog-id=133 op=UNLOAD Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:29.434000 audit: BPF prog-id=135 op=LOAD Jul 11 00:35:29.434000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2456 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:29.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666303236633933626334333436616635373635303938326164326438 Jul 11 00:35:29.437131 kubelet[1950]: E0711 00:35:29.437114 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.437625 kubelet[1950]: W0711 00:35:29.437601 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.437709 kubelet[1950]: E0711 00:35:29.437694 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.437989 kubelet[1950]: E0711 00:35:29.437974 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.438089 kubelet[1950]: W0711 00:35:29.438068 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.438157 kubelet[1950]: E0711 00:35:29.438145 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.438403 kubelet[1950]: E0711 00:35:29.438389 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.438487 kubelet[1950]: W0711 00:35:29.438473 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.438551 kubelet[1950]: E0711 00:35:29.438539 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.438843 kubelet[1950]: E0711 00:35:29.438827 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.438960 kubelet[1950]: W0711 00:35:29.438945 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.439030 kubelet[1950]: E0711 00:35:29.439018 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.439266 kubelet[1950]: E0711 00:35:29.439252 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.439336 kubelet[1950]: W0711 00:35:29.439324 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.439394 kubelet[1950]: E0711 00:35:29.439380 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.439738 kubelet[1950]: E0711 00:35:29.439720 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.439877 kubelet[1950]: W0711 00:35:29.439859 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.439987 kubelet[1950]: E0711 00:35:29.439972 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.440335 kubelet[1950]: E0711 00:35:29.440315 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.440335 kubelet[1950]: W0711 00:35:29.440333 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.440430 kubelet[1950]: E0711 00:35:29.440347 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.440537 kubelet[1950]: E0711 00:35:29.440525 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:35:29.440568 kubelet[1950]: W0711 00:35:29.440537 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:35:29.440568 kubelet[1950]: E0711 00:35:29.440546 1950 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:35:29.449105 env[1218]: time="2025-07-11T00:35:29.449061327Z" level=info msg="StartContainer for \"ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88\" returns successfully" Jul 11 00:35:29.467532 systemd[1]: cri-containerd-ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88.scope: Deactivated successfully. Jul 11 00:35:29.470000 audit: BPF prog-id=135 op=UNLOAD Jul 11 00:35:29.505365 env[1218]: time="2025-07-11T00:35:29.505318022Z" level=info msg="shim disconnected" id=ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88 Jul 11 00:35:29.505365 env[1218]: time="2025-07-11T00:35:29.505361424Z" level=warning msg="cleaning up after shim disconnected" id=ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88 namespace=k8s.io Jul 11 00:35:29.505577 env[1218]: time="2025-07-11T00:35:29.505373265Z" level=info msg="cleaning up dead shim" Jul 11 00:35:29.511447 env[1218]: time="2025-07-11T00:35:29.511408948Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:35:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2641 runtime=io.containerd.runc.v2\n" Jul 11 00:35:30.242963 kubelet[1950]: E0711 00:35:30.242901 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f6xhd" podUID="aa53afce-7b9d-4eee-a957-d67d4ca745f5" Jul 11 00:35:30.333698 kubelet[1950]: I0711 00:35:30.333670 1950 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:35:30.334096 kubelet[1950]: E0711 00:35:30.334066 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:30.334784 env[1218]: time="2025-07-11T00:35:30.334746628Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 11 00:35:30.341338 systemd[1]: run-containerd-runc-k8s.io-ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88-runc.5oYUXd.mount: Deactivated successfully. Jul 11 00:35:30.341432 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ff026c93bc4346af57650982ad2d8af11cda6de18bcec9592515bffc2bf7ce88-rootfs.mount: Deactivated successfully. Jul 11 00:35:32.243465 kubelet[1950]: E0711 00:35:32.243405 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-f6xhd" podUID="aa53afce-7b9d-4eee-a957-d67d4ca745f5" Jul 11 00:35:33.083331 env[1218]: time="2025-07-11T00:35:33.083283168Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:33.084951 env[1218]: time="2025-07-11T00:35:33.084920043Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:33.086786 env[1218]: time="2025-07-11T00:35:33.086748167Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:33.088023 env[1218]: time="2025-07-11T00:35:33.087976023Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:33.088542 env[1218]: time="2025-07-11T00:35:33.088513927Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 11 00:35:33.096320 env[1218]: time="2025-07-11T00:35:33.096271842Z" level=info msg="CreateContainer within sandbox \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 11 00:35:33.111873 env[1218]: time="2025-07-11T00:35:33.111822233Z" level=info msg="CreateContainer within sandbox \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53\"" Jul 11 00:35:33.112625 env[1218]: time="2025-07-11T00:35:33.112554467Z" level=info msg="StartContainer for \"228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53\"" Jul 11 00:35:33.135266 systemd[1]: Started cri-containerd-228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53.scope. Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.171947 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 11 00:35:33.172025 kernel: audit: type=1400 audit(1752194133.167:907): avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.172060 kernel: audit: type=1300 audit(1752194133.167:907): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2456 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:33.167000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2456 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:33.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232386461396636396338653333613866663563663366336434633264 Jul 11 00:35:33.178442 kernel: audit: type=1327 audit(1752194133.167:907): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232386461396636396338653333613866663563663366336434633264 Jul 11 00:35:33.178501 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.183433 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.183548 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.188049 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.188140 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.192082 env[1218]: time="2025-07-11T00:35:33.192032621Z" level=info msg="StartContainer for \"228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53\" returns successfully" Jul 11 00:35:33.193157 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.195594 kernel: audit: type=1400 audit(1752194133.167:908): avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit: BPF prog-id=136 op=LOAD Jul 11 00:35:33.167000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2456 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:33.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232386461396636396338653333613866663563663366336434633264 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.167000 audit: BPF prog-id=137 op=LOAD Jul 11 00:35:33.167000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2456 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:33.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232386461396636396338653333613866663563663366336434633264 Jul 11 00:35:33.170000 audit: BPF prog-id=137 op=UNLOAD Jul 11 00:35:33.170000 audit: BPF prog-id=136 op=UNLOAD Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:33.170000 audit: BPF prog-id=138 op=LOAD Jul 11 00:35:33.170000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2456 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:33.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232386461396636396338653333613866663563663366336434633264 Jul 11 00:35:33.844267 env[1218]: time="2025-07-11T00:35:33.844190363Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:35:33.846754 systemd[1]: cri-containerd-228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53.scope: Deactivated successfully. Jul 11 00:35:33.851000 audit: BPF prog-id=138 op=UNLOAD Jul 11 00:35:33.885500 kubelet[1950]: I0711 00:35:33.885270 1950 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 11 00:35:33.916676 env[1218]: time="2025-07-11T00:35:33.916296660Z" level=info msg="shim disconnected" id=228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53 Jul 11 00:35:33.918140 env[1218]: time="2025-07-11T00:35:33.918103422Z" level=warning msg="cleaning up after shim disconnected" id=228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53 namespace=k8s.io Jul 11 00:35:33.918218 env[1218]: time="2025-07-11T00:35:33.918204747Z" level=info msg="cleaning up dead shim" Jul 11 00:35:33.932229 systemd[1]: Created slice kubepods-besteffort-podf34c3f6f_9cd6_4fc8_9173_2094547bf9dc.slice. Jul 11 00:35:33.943752 systemd[1]: Created slice kubepods-besteffort-pod15102414_b9ad_4762_a826_4507031afab8.slice. Jul 11 00:35:33.948379 systemd[1]: Created slice kubepods-besteffort-pod34dd7a58_13a5_40bd_9bbf_2a0e954dc0d7.slice. Jul 11 00:35:33.951054 env[1218]: time="2025-07-11T00:35:33.950966365Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:35:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2707 runtime=io.containerd.runc.v2\n" Jul 11 00:35:33.953591 systemd[1]: Created slice kubepods-besteffort-pod0f516b6c_22b6_437e_9f66_5a9deab18e77.slice. Jul 11 00:35:33.958948 systemd[1]: Created slice kubepods-besteffort-podc726969c_6763_4115_bad6_191a2dd3a838.slice. Jul 11 00:35:33.965120 systemd[1]: Created slice kubepods-burstable-pod73b58247_9efa_480a_953d_bf1785d202fa.slice. Jul 11 00:35:33.970782 systemd[1]: Created slice kubepods-burstable-pod02d1f398_f1df_4170_9c80_449337ac7fcc.slice. Jul 11 00:35:33.971963 kubelet[1950]: I0711 00:35:33.971938 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7-calico-apiserver-certs\") pod \"calico-apiserver-84db954f75-q2wgx\" (UID: \"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7\") " pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" Jul 11 00:35:33.972050 kubelet[1950]: I0711 00:35:33.971977 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/15102414-b9ad-4762-a826-4507031afab8-whisker-backend-key-pair\") pod \"whisker-76fd47b65-xwdhm\" (UID: \"15102414-b9ad-4762-a826-4507031afab8\") " pod="calico-system/whisker-76fd47b65-xwdhm" Jul 11 00:35:33.972050 kubelet[1950]: I0711 00:35:33.971995 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/73b58247-9efa-480a-953d-bf1785d202fa-config-volume\") pod \"coredns-674b8bbfcf-99f7p\" (UID: \"73b58247-9efa-480a-953d-bf1785d202fa\") " pod="kube-system/coredns-674b8bbfcf-99f7p" Jul 11 00:35:33.972050 kubelet[1950]: I0711 00:35:33.972012 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4t2bq\" (UniqueName: \"kubernetes.io/projected/c726969c-6763-4115-bad6-191a2dd3a838-kube-api-access-4t2bq\") pod \"calico-apiserver-84db954f75-ll295\" (UID: \"c726969c-6763-4115-bad6-191a2dd3a838\") " pod="calico-apiserver/calico-apiserver-84db954f75-ll295" Jul 11 00:35:33.972169 kubelet[1950]: I0711 00:35:33.972068 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-plgtq\" (UniqueName: \"kubernetes.io/projected/34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7-kube-api-access-plgtq\") pod \"calico-apiserver-84db954f75-q2wgx\" (UID: \"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7\") " pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" Jul 11 00:35:33.972169 kubelet[1950]: I0711 00:35:33.972101 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f34c3f6f-9cd6-4fc8-9173-2094547bf9dc-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-8xrrm\" (UID: \"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc\") " pod="calico-system/goldmane-768f4c5c69-8xrrm" Jul 11 00:35:33.972169 kubelet[1950]: I0711 00:35:33.972126 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0f516b6c-22b6-437e-9f66-5a9deab18e77-tigera-ca-bundle\") pod \"calico-kube-controllers-7756745fd8-mrw8v\" (UID: \"0f516b6c-22b6-437e-9f66-5a9deab18e77\") " pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" Jul 11 00:35:33.972169 kubelet[1950]: I0711 00:35:33.972143 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c726969c-6763-4115-bad6-191a2dd3a838-calico-apiserver-certs\") pod \"calico-apiserver-84db954f75-ll295\" (UID: \"c726969c-6763-4115-bad6-191a2dd3a838\") " pod="calico-apiserver/calico-apiserver-84db954f75-ll295" Jul 11 00:35:33.972491 kubelet[1950]: I0711 00:35:33.972182 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/02d1f398-f1df-4170-9c80-449337ac7fcc-config-volume\") pod \"coredns-674b8bbfcf-kk29p\" (UID: \"02d1f398-f1df-4170-9c80-449337ac7fcc\") " pod="kube-system/coredns-674b8bbfcf-kk29p" Jul 11 00:35:33.972491 kubelet[1950]: I0711 00:35:33.972205 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5jxfs\" (UniqueName: \"kubernetes.io/projected/02d1f398-f1df-4170-9c80-449337ac7fcc-kube-api-access-5jxfs\") pod \"coredns-674b8bbfcf-kk29p\" (UID: \"02d1f398-f1df-4170-9c80-449337ac7fcc\") " pod="kube-system/coredns-674b8bbfcf-kk29p" Jul 11 00:35:33.972491 kubelet[1950]: I0711 00:35:33.972223 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l7tx8\" (UniqueName: \"kubernetes.io/projected/15102414-b9ad-4762-a826-4507031afab8-kube-api-access-l7tx8\") pod \"whisker-76fd47b65-xwdhm\" (UID: \"15102414-b9ad-4762-a826-4507031afab8\") " pod="calico-system/whisker-76fd47b65-xwdhm" Jul 11 00:35:33.972491 kubelet[1950]: I0711 00:35:33.972246 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/f34c3f6f-9cd6-4fc8-9173-2094547bf9dc-config\") pod \"goldmane-768f4c5c69-8xrrm\" (UID: \"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc\") " pod="calico-system/goldmane-768f4c5c69-8xrrm" Jul 11 00:35:33.972491 kubelet[1950]: I0711 00:35:33.972263 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/f34c3f6f-9cd6-4fc8-9173-2094547bf9dc-goldmane-key-pair\") pod \"goldmane-768f4c5c69-8xrrm\" (UID: \"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc\") " pod="calico-system/goldmane-768f4c5c69-8xrrm" Jul 11 00:35:33.973301 kubelet[1950]: I0711 00:35:33.972281 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b7qwm\" (UniqueName: \"kubernetes.io/projected/0f516b6c-22b6-437e-9f66-5a9deab18e77-kube-api-access-b7qwm\") pod \"calico-kube-controllers-7756745fd8-mrw8v\" (UID: \"0f516b6c-22b6-437e-9f66-5a9deab18e77\") " pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" Jul 11 00:35:33.973301 kubelet[1950]: I0711 00:35:33.972310 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15102414-b9ad-4762-a826-4507031afab8-whisker-ca-bundle\") pod \"whisker-76fd47b65-xwdhm\" (UID: \"15102414-b9ad-4762-a826-4507031afab8\") " pod="calico-system/whisker-76fd47b65-xwdhm" Jul 11 00:35:33.973301 kubelet[1950]: I0711 00:35:33.972334 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cbw8b\" (UniqueName: \"kubernetes.io/projected/73b58247-9efa-480a-953d-bf1785d202fa-kube-api-access-cbw8b\") pod \"coredns-674b8bbfcf-99f7p\" (UID: \"73b58247-9efa-480a-953d-bf1785d202fa\") " pod="kube-system/coredns-674b8bbfcf-99f7p" Jul 11 00:35:33.973301 kubelet[1950]: I0711 00:35:33.972350 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ftpzn\" (UniqueName: \"kubernetes.io/projected/f34c3f6f-9cd6-4fc8-9173-2094547bf9dc-kube-api-access-ftpzn\") pod \"goldmane-768f4c5c69-8xrrm\" (UID: \"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc\") " pod="calico-system/goldmane-768f4c5c69-8xrrm" Jul 11 00:35:34.112373 systemd[1]: run-containerd-runc-k8s.io-228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53-runc.fzbZub.mount: Deactivated successfully. Jul 11 00:35:34.112466 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-228da9f69c8e33a8ff5cf3f3d4c2d7a35855bcf0969b61ab982c94ab590cea53-rootfs.mount: Deactivated successfully. Jul 11 00:35:34.237818 env[1218]: time="2025-07-11T00:35:34.237643759Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-8xrrm,Uid:f34c3f6f-9cd6-4fc8-9173-2094547bf9dc,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:34.248228 systemd[1]: Created slice kubepods-besteffort-podaa53afce_7b9d_4eee_a957_d67d4ca745f5.slice. Jul 11 00:35:34.249072 env[1218]: time="2025-07-11T00:35:34.249027781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-76fd47b65-xwdhm,Uid:15102414-b9ad-4762-a826-4507031afab8,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:34.252276 env[1218]: time="2025-07-11T00:35:34.251221838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-q2wgx,Uid:34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:35:34.260168 env[1218]: time="2025-07-11T00:35:34.260125630Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7756745fd8-mrw8v,Uid:0f516b6c-22b6-437e-9f66-5a9deab18e77,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:34.260804 env[1218]: time="2025-07-11T00:35:34.260336999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f6xhd,Uid:aa53afce-7b9d-4eee-a957-d67d4ca745f5,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:34.270225 env[1218]: time="2025-07-11T00:35:34.267499515Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-ll295,Uid:c726969c-6763-4115-bad6-191a2dd3a838,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:35:34.270328 kubelet[1950]: E0711 00:35:34.268112 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:34.271416 env[1218]: time="2025-07-11T00:35:34.271262801Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-99f7p,Uid:73b58247-9efa-480a-953d-bf1785d202fa,Namespace:kube-system,Attempt:0,}" Jul 11 00:35:34.275166 kubelet[1950]: E0711 00:35:34.273740 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:34.275352 env[1218]: time="2025-07-11T00:35:34.275313459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kk29p,Uid:02d1f398-f1df-4170-9c80-449337ac7fcc,Namespace:kube-system,Attempt:0,}" Jul 11 00:35:34.357393 env[1218]: time="2025-07-11T00:35:34.354499868Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 11 00:35:34.609773 env[1218]: time="2025-07-11T00:35:34.609705393Z" level=error msg="Failed to destroy network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.615657 env[1218]: time="2025-07-11T00:35:34.615599252Z" level=error msg="encountered an error cleaning up failed sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.615763 env[1218]: time="2025-07-11T00:35:34.615687856Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-76fd47b65-xwdhm,Uid:15102414-b9ad-4762-a826-4507031afab8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.616017 kubelet[1950]: E0711 00:35:34.615964 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.616095 kubelet[1950]: E0711 00:35:34.616050 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-76fd47b65-xwdhm" Jul 11 00:35:34.616095 kubelet[1950]: E0711 00:35:34.616081 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-76fd47b65-xwdhm" Jul 11 00:35:34.616174 kubelet[1950]: E0711 00:35:34.616142 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-76fd47b65-xwdhm_calico-system(15102414-b9ad-4762-a826-4507031afab8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-76fd47b65-xwdhm_calico-system(15102414-b9ad-4762-a826-4507031afab8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-76fd47b65-xwdhm" podUID="15102414-b9ad-4762-a826-4507031afab8" Jul 11 00:35:34.625031 env[1218]: time="2025-07-11T00:35:34.624972145Z" level=error msg="Failed to destroy network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.625452 env[1218]: time="2025-07-11T00:35:34.625406484Z" level=error msg="encountered an error cleaning up failed sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.625524 env[1218]: time="2025-07-11T00:35:34.625469927Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7756745fd8-mrw8v,Uid:0f516b6c-22b6-437e-9f66-5a9deab18e77,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.625747 kubelet[1950]: E0711 00:35:34.625700 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.627466 kubelet[1950]: E0711 00:35:34.625767 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" Jul 11 00:35:34.627466 kubelet[1950]: E0711 00:35:34.627459 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" Jul 11 00:35:34.627590 kubelet[1950]: E0711 00:35:34.627538 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7756745fd8-mrw8v_calico-system(0f516b6c-22b6-437e-9f66-5a9deab18e77)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7756745fd8-mrw8v_calico-system(0f516b6c-22b6-437e-9f66-5a9deab18e77)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" podUID="0f516b6c-22b6-437e-9f66-5a9deab18e77" Jul 11 00:35:34.638492 env[1218]: time="2025-07-11T00:35:34.638437858Z" level=error msg="Failed to destroy network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.638917 env[1218]: time="2025-07-11T00:35:34.638870798Z" level=error msg="encountered an error cleaning up failed sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.638990 env[1218]: time="2025-07-11T00:35:34.638928880Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-q2wgx,Uid:34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.639189 kubelet[1950]: E0711 00:35:34.639150 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.639252 kubelet[1950]: E0711 00:35:34.639215 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" Jul 11 00:35:34.639252 kubelet[1950]: E0711 00:35:34.639236 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" Jul 11 00:35:34.639313 kubelet[1950]: E0711 00:35:34.639289 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-84db954f75-q2wgx_calico-apiserver(34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-84db954f75-q2wgx_calico-apiserver(34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" podUID="34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7" Jul 11 00:35:34.650050 env[1218]: time="2025-07-11T00:35:34.649992728Z" level=error msg="Failed to destroy network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.650395 env[1218]: time="2025-07-11T00:35:34.650357424Z" level=error msg="encountered an error cleaning up failed sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.650459 env[1218]: time="2025-07-11T00:35:34.650410826Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kk29p,Uid:02d1f398-f1df-4170-9c80-449337ac7fcc,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.650672 kubelet[1950]: E0711 00:35:34.650628 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.650741 kubelet[1950]: E0711 00:35:34.650692 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-kk29p" Jul 11 00:35:34.650741 kubelet[1950]: E0711 00:35:34.650714 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-kk29p" Jul 11 00:35:34.650813 kubelet[1950]: E0711 00:35:34.650765 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-kk29p_kube-system(02d1f398-f1df-4170-9c80-449337ac7fcc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-kk29p_kube-system(02d1f398-f1df-4170-9c80-449337ac7fcc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-kk29p" podUID="02d1f398-f1df-4170-9c80-449337ac7fcc" Jul 11 00:35:34.651381 env[1218]: time="2025-07-11T00:35:34.651326266Z" level=error msg="Failed to destroy network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.651764 env[1218]: time="2025-07-11T00:35:34.651712723Z" level=error msg="encountered an error cleaning up failed sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.651822 env[1218]: time="2025-07-11T00:35:34.651776606Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-8xrrm,Uid:f34c3f6f-9cd6-4fc8-9173-2094547bf9dc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.652005 kubelet[1950]: E0711 00:35:34.651980 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.652045 kubelet[1950]: E0711 00:35:34.652019 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-8xrrm" Jul 11 00:35:34.652072 kubelet[1950]: E0711 00:35:34.652057 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-8xrrm" Jul 11 00:35:34.652124 kubelet[1950]: E0711 00:35:34.652092 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-8xrrm_calico-system(f34c3f6f-9cd6-4fc8-9173-2094547bf9dc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-8xrrm_calico-system(f34c3f6f-9cd6-4fc8-9173-2094547bf9dc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-8xrrm" podUID="f34c3f6f-9cd6-4fc8-9173-2094547bf9dc" Jul 11 00:35:34.656964 env[1218]: time="2025-07-11T00:35:34.656906872Z" level=error msg="Failed to destroy network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.657264 env[1218]: time="2025-07-11T00:35:34.657222526Z" level=error msg="encountered an error cleaning up failed sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.657319 env[1218]: time="2025-07-11T00:35:34.657267408Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-ll295,Uid:c726969c-6763-4115-bad6-191a2dd3a838,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.657455 kubelet[1950]: E0711 00:35:34.657412 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.657496 kubelet[1950]: E0711 00:35:34.657468 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84db954f75-ll295" Jul 11 00:35:34.657496 kubelet[1950]: E0711 00:35:34.657486 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84db954f75-ll295" Jul 11 00:35:34.657561 kubelet[1950]: E0711 00:35:34.657540 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-84db954f75-ll295_calico-apiserver(c726969c-6763-4115-bad6-191a2dd3a838)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-84db954f75-ll295_calico-apiserver(c726969c-6763-4115-bad6-191a2dd3a838)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84db954f75-ll295" podUID="c726969c-6763-4115-bad6-191a2dd3a838" Jul 11 00:35:34.663799 env[1218]: time="2025-07-11T00:35:34.663729013Z" level=error msg="Failed to destroy network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.664095 env[1218]: time="2025-07-11T00:35:34.664058347Z" level=error msg="encountered an error cleaning up failed sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.664154 env[1218]: time="2025-07-11T00:35:34.664120230Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-99f7p,Uid:73b58247-9efa-480a-953d-bf1785d202fa,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.664333 kubelet[1950]: E0711 00:35:34.664277 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.664387 kubelet[1950]: E0711 00:35:34.664342 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-99f7p" Jul 11 00:35:34.664387 kubelet[1950]: E0711 00:35:34.664367 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-99f7p" Jul 11 00:35:34.664448 kubelet[1950]: E0711 00:35:34.664413 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-99f7p_kube-system(73b58247-9efa-480a-953d-bf1785d202fa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-99f7p_kube-system(73b58247-9efa-480a-953d-bf1785d202fa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-99f7p" podUID="73b58247-9efa-480a-953d-bf1785d202fa" Jul 11 00:35:34.668101 env[1218]: time="2025-07-11T00:35:34.668046443Z" level=error msg="Failed to destroy network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.668399 env[1218]: time="2025-07-11T00:35:34.668356777Z" level=error msg="encountered an error cleaning up failed sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.668441 env[1218]: time="2025-07-11T00:35:34.668405459Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f6xhd,Uid:aa53afce-7b9d-4eee-a957-d67d4ca745f5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.668606 kubelet[1950]: E0711 00:35:34.668556 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:34.668646 kubelet[1950]: E0711 00:35:34.668608 1950 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:34.668646 kubelet[1950]: E0711 00:35:34.668625 1950 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-f6xhd" Jul 11 00:35:34.668706 kubelet[1950]: E0711 00:35:34.668683 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-f6xhd_calico-system(aa53afce-7b9d-4eee-a957-d67d4ca745f5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-f6xhd_calico-system(aa53afce-7b9d-4eee-a957-d67d4ca745f5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f6xhd" podUID="aa53afce-7b9d-4eee-a957-d67d4ca745f5" Jul 11 00:35:35.106409 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd-shm.mount: Deactivated successfully. Jul 11 00:35:35.106493 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65-shm.mount: Deactivated successfully. Jul 11 00:35:35.106544 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6-shm.mount: Deactivated successfully. Jul 11 00:35:35.355807 kubelet[1950]: I0711 00:35:35.355762 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:35:35.356424 env[1218]: time="2025-07-11T00:35:35.356382215Z" level=info msg="StopPodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\"" Jul 11 00:35:35.358978 kubelet[1950]: I0711 00:35:35.357674 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:35:35.360396 env[1218]: time="2025-07-11T00:35:35.360044811Z" level=info msg="StopPodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\"" Jul 11 00:35:35.360482 kubelet[1950]: I0711 00:35:35.360077 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:35:35.360552 env[1218]: time="2025-07-11T00:35:35.360519831Z" level=info msg="StopPodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\"" Jul 11 00:35:35.362392 kubelet[1950]: I0711 00:35:35.362208 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:35:35.363055 env[1218]: time="2025-07-11T00:35:35.362990616Z" level=info msg="StopPodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\"" Jul 11 00:35:35.364566 kubelet[1950]: I0711 00:35:35.364263 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:35:35.366341 env[1218]: time="2025-07-11T00:35:35.366226994Z" level=info msg="StopPodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\"" Jul 11 00:35:35.366430 kubelet[1950]: I0711 00:35:35.366361 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:35:35.366850 env[1218]: time="2025-07-11T00:35:35.366817139Z" level=info msg="StopPodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\"" Jul 11 00:35:35.371093 kubelet[1950]: I0711 00:35:35.370925 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:35:35.371526 env[1218]: time="2025-07-11T00:35:35.371486017Z" level=info msg="StopPodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\"" Jul 11 00:35:35.373192 kubelet[1950]: I0711 00:35:35.373145 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:35:35.374433 env[1218]: time="2025-07-11T00:35:35.373670150Z" level=info msg="StopPodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\"" Jul 11 00:35:35.390845 env[1218]: time="2025-07-11T00:35:35.390784517Z" level=error msg="StopPodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" failed" error="failed to destroy network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.398716 kubelet[1950]: E0711 00:35:35.395919 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:35:35.398716 kubelet[1950]: E0711 00:35:35.395968 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749"} Jul 11 00:35:35.398716 kubelet[1950]: E0711 00:35:35.396021 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c726969c-6763-4115-bad6-191a2dd3a838\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.398716 kubelet[1950]: E0711 00:35:35.396042 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c726969c-6763-4115-bad6-191a2dd3a838\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84db954f75-ll295" podUID="c726969c-6763-4115-bad6-191a2dd3a838" Jul 11 00:35:35.404599 env[1218]: time="2025-07-11T00:35:35.404339733Z" level=error msg="StopPodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" failed" error="failed to destroy network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.406753 kubelet[1950]: E0711 00:35:35.404558 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:35:35.406753 kubelet[1950]: E0711 00:35:35.404600 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5"} Jul 11 00:35:35.406753 kubelet[1950]: E0711 00:35:35.404633 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"02d1f398-f1df-4170-9c80-449337ac7fcc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.406753 kubelet[1950]: E0711 00:35:35.404654 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"02d1f398-f1df-4170-9c80-449337ac7fcc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-kk29p" podUID="02d1f398-f1df-4170-9c80-449337ac7fcc" Jul 11 00:35:35.431002 env[1218]: time="2025-07-11T00:35:35.430939104Z" level=error msg="StopPodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" failed" error="failed to destroy network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.431386 kubelet[1950]: E0711 00:35:35.431208 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:35:35.431386 kubelet[1950]: E0711 00:35:35.431277 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd"} Jul 11 00:35:35.431386 kubelet[1950]: E0711 00:35:35.431308 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.431386 kubelet[1950]: E0711 00:35:35.431341 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"aa53afce-7b9d-4eee-a957-d67d4ca745f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-f6xhd" podUID="aa53afce-7b9d-4eee-a957-d67d4ca745f5" Jul 11 00:35:35.437925 env[1218]: time="2025-07-11T00:35:35.437871718Z" level=error msg="StopPodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" failed" error="failed to destroy network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.438017 env[1218]: time="2025-07-11T00:35:35.437875079Z" level=error msg="StopPodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" failed" error="failed to destroy network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.438194 kubelet[1950]: E0711 00:35:35.438137 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:35:35.438256 kubelet[1950]: E0711 00:35:35.438203 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac"} Jul 11 00:35:35.438288 kubelet[1950]: E0711 00:35:35.438236 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0f516b6c-22b6-437e-9f66-5a9deab18e77\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.438348 kubelet[1950]: E0711 00:35:35.438283 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0f516b6c-22b6-437e-9f66-5a9deab18e77\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" podUID="0f516b6c-22b6-437e-9f66-5a9deab18e77" Jul 11 00:35:35.438348 kubelet[1950]: E0711 00:35:35.438317 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:35:35.438348 kubelet[1950]: E0711 00:35:35.438344 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65"} Jul 11 00:35:35.438443 kubelet[1950]: E0711 00:35:35.438364 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"15102414-b9ad-4762-a826-4507031afab8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.438443 kubelet[1950]: E0711 00:35:35.438380 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"15102414-b9ad-4762-a826-4507031afab8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-76fd47b65-xwdhm" podUID="15102414-b9ad-4762-a826-4507031afab8" Jul 11 00:35:35.443517 env[1218]: time="2025-07-11T00:35:35.443315910Z" level=error msg="StopPodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" failed" error="failed to destroy network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.443841 kubelet[1950]: E0711 00:35:35.443721 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:35:35.443841 kubelet[1950]: E0711 00:35:35.443757 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6"} Jul 11 00:35:35.443841 kubelet[1950]: E0711 00:35:35.443782 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.443841 kubelet[1950]: E0711 00:35:35.443811 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-8xrrm" podUID="f34c3f6f-9cd6-4fc8-9173-2094547bf9dc" Jul 11 00:35:35.447878 env[1218]: time="2025-07-11T00:35:35.447749378Z" level=error msg="StopPodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" failed" error="failed to destroy network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.448041 kubelet[1950]: E0711 00:35:35.447998 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:35:35.448041 kubelet[1950]: E0711 00:35:35.448038 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9"} Jul 11 00:35:35.448121 kubelet[1950]: E0711 00:35:35.448073 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"73b58247-9efa-480a-953d-bf1785d202fa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.448121 kubelet[1950]: E0711 00:35:35.448093 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"73b58247-9efa-480a-953d-bf1785d202fa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-99f7p" podUID="73b58247-9efa-480a-953d-bf1785d202fa" Jul 11 00:35:35.450848 env[1218]: time="2025-07-11T00:35:35.450783707Z" level=error msg="StopPodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" failed" error="failed to destroy network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:35:35.451244 kubelet[1950]: E0711 00:35:35.451096 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:35:35.451244 kubelet[1950]: E0711 00:35:35.451159 1950 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb"} Jul 11 00:35:35.451244 kubelet[1950]: E0711 00:35:35.451183 1950 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:35:35.451244 kubelet[1950]: E0711 00:35:35.451217 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" podUID="34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7" Jul 11 00:35:38.390438 kubelet[1950]: I0711 00:35:38.390365 1950 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:35:38.390878 kubelet[1950]: E0711 00:35:38.390769 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:38.418000 audit[3140]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:38.420191 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 11 00:35:38.420283 kernel: audit: type=1325 audit(1752194138.418:914): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:38.418000 audit[3140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcf4587b0 a2=0 a3=1 items=0 ppid=2063 pid=3140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:38.426345 kernel: audit: type=1300 audit(1752194138.418:914): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcf4587b0 a2=0 a3=1 items=0 ppid=2063 pid=3140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:38.426412 kernel: audit: type=1327 audit(1752194138.418:914): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:38.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:38.429000 audit[3140]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:38.429000 audit[3140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffcf4587b0 a2=0 a3=1 items=0 ppid=2063 pid=3140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:38.436942 kernel: audit: type=1325 audit(1752194138.429:915): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:38.436996 kernel: audit: type=1300 audit(1752194138.429:915): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffcf4587b0 a2=0 a3=1 items=0 ppid=2063 pid=3140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:38.429000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:38.439082 kernel: audit: type=1327 audit(1752194138.429:915): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:39.382982 kubelet[1950]: E0711 00:35:39.382953 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:39.723482 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3300272508.mount: Deactivated successfully. Jul 11 00:35:39.943321 env[1218]: time="2025-07-11T00:35:39.943266564Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:39.944917 env[1218]: time="2025-07-11T00:35:39.944890265Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:39.946620 env[1218]: time="2025-07-11T00:35:39.946594528Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:39.947871 env[1218]: time="2025-07-11T00:35:39.947839294Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:39.948245 env[1218]: time="2025-07-11T00:35:39.948211188Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 11 00:35:39.962874 env[1218]: time="2025-07-11T00:35:39.962842452Z" level=info msg="CreateContainer within sandbox \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 11 00:35:39.974269 env[1218]: time="2025-07-11T00:35:39.974189713Z" level=info msg="CreateContainer within sandbox \"18030b3074c2323f91a05d340542eadcb4ecabb08f2c4ecd03de6e8763efcd8f\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"f4d2daa43340e7600a460aabad9f9cc38c37d2928c4ef3cd7abbeec5d67bbebd\"" Jul 11 00:35:39.975320 env[1218]: time="2025-07-11T00:35:39.975281954Z" level=info msg="StartContainer for \"f4d2daa43340e7600a460aabad9f9cc38c37d2928c4ef3cd7abbeec5d67bbebd\"" Jul 11 00:35:39.990339 systemd[1]: Started cri-containerd-f4d2daa43340e7600a460aabad9f9cc38c37d2928c4ef3cd7abbeec5d67bbebd.scope. Jul 11 00:35:40.036173 kernel: audit: type=1400 audit(1752194140.025:916): avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.036279 kernel: audit: type=1300 audit(1752194140.025:916): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2456 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:40.036315 kernel: audit: type=1327 audit(1752194140.025:916): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643264616134333334306537363030613436306161626164396639 Jul 11 00:35:40.036340 kernel: audit: type=1400 audit(1752194140.025:917): avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2456 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:40.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643264616134333334306537363030613436306161626164396639 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.025000 audit: BPF prog-id=139 op=LOAD Jul 11 00:35:40.025000 audit[3150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2456 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:40.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643264616134333334306537363030613436306161626164396639 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.028000 audit: BPF prog-id=140 op=LOAD Jul 11 00:35:40.028000 audit[3150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2456 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:40.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643264616134333334306537363030613436306161626164396639 Jul 11 00:35:40.031000 audit: BPF prog-id=140 op=UNLOAD Jul 11 00:35:40.031000 audit: BPF prog-id=139 op=UNLOAD Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { perfmon } for pid=3150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit[3150]: AVC avc: denied { bpf } for pid=3150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:40.031000 audit: BPF prog-id=141 op=LOAD Jul 11 00:35:40.031000 audit[3150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2456 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:40.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643264616134333334306537363030613436306161626164396639 Jul 11 00:35:40.054849 env[1218]: time="2025-07-11T00:35:40.053175549Z" level=info msg="StartContainer for \"f4d2daa43340e7600a460aabad9f9cc38c37d2928c4ef3cd7abbeec5d67bbebd\" returns successfully" Jul 11 00:35:40.235996 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 11 00:35:40.236125 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 11 00:35:40.329663 env[1218]: time="2025-07-11T00:35:40.329607429Z" level=info msg="StopPodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\"" Jul 11 00:35:40.405151 kubelet[1950]: I0711 00:35:40.404477 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-lfz7j" podStartSLOduration=0.927860295 podStartE2EDuration="14.404461966s" podCreationTimestamp="2025-07-11 00:35:26 +0000 UTC" firstStartedPulling="2025-07-11 00:35:26.47250027 +0000 UTC m=+23.333068858" lastFinishedPulling="2025-07-11 00:35:39.949101941 +0000 UTC m=+36.809670529" observedRunningTime="2025-07-11 00:35:40.403210081 +0000 UTC m=+37.263778669" watchObservedRunningTime="2025-07-11 00:35:40.404461966 +0000 UTC m=+37.265030554" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.446 [INFO][3207] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.446 [INFO][3207] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" iface="eth0" netns="/var/run/netns/cni-58017f13-98b3-f7a3-3d74-7c4a9dba709d" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.446 [INFO][3207] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" iface="eth0" netns="/var/run/netns/cni-58017f13-98b3-f7a3-3d74-7c4a9dba709d" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.448 [INFO][3207] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" iface="eth0" netns="/var/run/netns/cni-58017f13-98b3-f7a3-3d74-7c4a9dba709d" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.448 [INFO][3207] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.448 [INFO][3207] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.547 [INFO][3233] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.547 [INFO][3233] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.547 [INFO][3233] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.557 [WARNING][3233] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.557 [INFO][3233] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.559 [INFO][3233] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:40.562882 env[1218]: 2025-07-11 00:35:40.561 [INFO][3207] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:35:40.563297 env[1218]: time="2025-07-11T00:35:40.563023559Z" level=info msg="TearDown network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" successfully" Jul 11 00:35:40.563297 env[1218]: time="2025-07-11T00:35:40.563057640Z" level=info msg="StopPodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" returns successfully" Jul 11 00:35:40.639655 kubelet[1950]: I0711 00:35:40.639505 1950 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-l7tx8\" (UniqueName: \"kubernetes.io/projected/15102414-b9ad-4762-a826-4507031afab8-kube-api-access-l7tx8\") pod \"15102414-b9ad-4762-a826-4507031afab8\" (UID: \"15102414-b9ad-4762-a826-4507031afab8\") " Jul 11 00:35:40.639655 kubelet[1950]: I0711 00:35:40.639607 1950 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/15102414-b9ad-4762-a826-4507031afab8-whisker-backend-key-pair\") pod \"15102414-b9ad-4762-a826-4507031afab8\" (UID: \"15102414-b9ad-4762-a826-4507031afab8\") " Jul 11 00:35:40.639655 kubelet[1950]: I0711 00:35:40.639646 1950 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15102414-b9ad-4762-a826-4507031afab8-whisker-ca-bundle\") pod \"15102414-b9ad-4762-a826-4507031afab8\" (UID: \"15102414-b9ad-4762-a826-4507031afab8\") " Jul 11 00:35:40.640855 kubelet[1950]: I0711 00:35:40.640811 1950 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/15102414-b9ad-4762-a826-4507031afab8-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "15102414-b9ad-4762-a826-4507031afab8" (UID: "15102414-b9ad-4762-a826-4507031afab8"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 11 00:35:40.643443 kubelet[1950]: I0711 00:35:40.643403 1950 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/15102414-b9ad-4762-a826-4507031afab8-kube-api-access-l7tx8" (OuterVolumeSpecName: "kube-api-access-l7tx8") pod "15102414-b9ad-4762-a826-4507031afab8" (UID: "15102414-b9ad-4762-a826-4507031afab8"). InnerVolumeSpecName "kube-api-access-l7tx8". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 11 00:35:40.643611 kubelet[1950]: I0711 00:35:40.643575 1950 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/15102414-b9ad-4762-a826-4507031afab8-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "15102414-b9ad-4762-a826-4507031afab8" (UID: "15102414-b9ad-4762-a826-4507031afab8"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 11 00:35:40.724379 systemd[1]: run-netns-cni\x2d58017f13\x2d98b3\x2df7a3\x2d3d74\x2d7c4a9dba709d.mount: Deactivated successfully. Jul 11 00:35:40.724469 systemd[1]: var-lib-kubelet-pods-15102414\x2db9ad\x2d4762\x2da826\x2d4507031afab8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dl7tx8.mount: Deactivated successfully. Jul 11 00:35:40.724537 systemd[1]: var-lib-kubelet-pods-15102414\x2db9ad\x2d4762\x2da826\x2d4507031afab8-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 11 00:35:40.740452 kubelet[1950]: I0711 00:35:40.740407 1950 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/15102414-b9ad-4762-a826-4507031afab8-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 11 00:35:40.740452 kubelet[1950]: I0711 00:35:40.740446 1950 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15102414-b9ad-4762-a826-4507031afab8-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 11 00:35:40.740452 kubelet[1950]: I0711 00:35:40.740456 1950 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-l7tx8\" (UniqueName: \"kubernetes.io/projected/15102414-b9ad-4762-a826-4507031afab8-kube-api-access-l7tx8\") on node \"localhost\" DevicePath \"\"" Jul 11 00:35:41.249681 systemd[1]: Removed slice kubepods-besteffort-pod15102414_b9ad_4762_a826_4507031afab8.slice. Jul 11 00:35:41.403239 systemd[1]: run-containerd-runc-k8s.io-f4d2daa43340e7600a460aabad9f9cc38c37d2928c4ef3cd7abbeec5d67bbebd-runc.fAd1bh.mount: Deactivated successfully. Jul 11 00:35:41.448074 systemd[1]: Created slice kubepods-besteffort-pod1c5aa209_9df0_4070_b38c_bebfc8921c1d.slice. Jul 11 00:35:41.544514 kubelet[1950]: I0711 00:35:41.544474 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1c5aa209-9df0-4070-b38c-bebfc8921c1d-whisker-ca-bundle\") pod \"whisker-78f4b6c6c5-zwxj9\" (UID: \"1c5aa209-9df0-4070-b38c-bebfc8921c1d\") " pod="calico-system/whisker-78f4b6c6c5-zwxj9" Jul 11 00:35:41.544514 kubelet[1950]: I0711 00:35:41.544519 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1c5aa209-9df0-4070-b38c-bebfc8921c1d-whisker-backend-key-pair\") pod \"whisker-78f4b6c6c5-zwxj9\" (UID: \"1c5aa209-9df0-4070-b38c-bebfc8921c1d\") " pod="calico-system/whisker-78f4b6c6c5-zwxj9" Jul 11 00:35:41.544864 kubelet[1950]: I0711 00:35:41.544543 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n5s7x\" (UniqueName: \"kubernetes.io/projected/1c5aa209-9df0-4070-b38c-bebfc8921c1d-kube-api-access-n5s7x\") pod \"whisker-78f4b6c6c5-zwxj9\" (UID: \"1c5aa209-9df0-4070-b38c-bebfc8921c1d\") " pod="calico-system/whisker-78f4b6c6c5-zwxj9" Jul 11 00:35:41.557000 audit[3334]: AVC avc: denied { write } for pid=3334 comm="tee" name="fd" dev="proc" ino=18918 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.557000 audit[3334]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff6f6c7ef a2=241 a3=1b6 items=1 ppid=3302 pid=3334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.557000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 11 00:35:41.557000 audit: PATH item=0 name="/dev/fd/63" inode=20871 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.557000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.560000 audit[3321]: AVC avc: denied { write } for pid=3321 comm="tee" name="fd" dev="proc" ino=18924 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.560000 audit[3321]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffb50c7de a2=241 a3=1b6 items=1 ppid=3291 pid=3321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.560000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 11 00:35:41.560000 audit: PATH item=0 name="/dev/fd/63" inode=19882 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.560000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.570000 audit[3338]: AVC avc: denied { write } for pid=3338 comm="tee" name="fd" dev="proc" ino=19895 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.570000 audit[3338]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffa0e47ed a2=241 a3=1b6 items=1 ppid=3296 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.570000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 11 00:35:41.570000 audit: PATH item=0 name="/dev/fd/63" inode=19885 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.570000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.570000 audit[3318]: AVC avc: denied { write } for pid=3318 comm="tee" name="fd" dev="proc" ino=19897 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.570000 audit[3318]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffb34d7dd a2=241 a3=1b6 items=1 ppid=3294 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.570000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 11 00:35:41.570000 audit: PATH item=0 name="/dev/fd/63" inode=18125 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.570000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.573000 audit[3342]: AVC avc: denied { write } for pid=3342 comm="tee" name="fd" dev="proc" ino=19903 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.573000 audit[3342]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc226f7ee a2=241 a3=1b6 items=1 ppid=3299 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.573000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 11 00:35:41.573000 audit: PATH item=0 name="/dev/fd/63" inode=18134 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.573000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.575000 audit[3363]: AVC avc: denied { write } for pid=3363 comm="tee" name="fd" dev="proc" ino=18141 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.575000 audit[3363]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe94467ed a2=241 a3=1b6 items=1 ppid=3293 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.575000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 11 00:35:41.575000 audit: PATH item=0 name="/dev/fd/63" inode=18930 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.575000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.576000 audit[3350]: AVC avc: denied { write } for pid=3350 comm="tee" name="fd" dev="proc" ino=19907 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:35:41.576000 audit[3350]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd21187ed a2=241 a3=1b6 items=1 ppid=3297 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.576000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 11 00:35:41.576000 audit: PATH item=0 name="/dev/fd/63" inode=19890 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:35:41.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:35:41.751152 env[1218]: time="2025-07-11T00:35:41.751049328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-78f4b6c6c5-zwxj9,Uid:1c5aa209-9df0-4070-b38c-bebfc8921c1d,Namespace:calico-system,Attempt:0,}" Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit: BPF prog-id=142 op=LOAD Jul 11 00:35:41.777000 audit[3409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc32fddd8 a2=98 a3=ffffc32fddc8 items=0 ppid=3300 pid=3409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:35:41.777000 audit: BPF prog-id=142 op=UNLOAD Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit: BPF prog-id=143 op=LOAD Jul 11 00:35:41.777000 audit[3409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc32fdc88 a2=74 a3=95 items=0 ppid=3300 pid=3409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:35:41.777000 audit: BPF prog-id=143 op=UNLOAD Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { bpf } for pid=3409 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit: BPF prog-id=144 op=LOAD Jul 11 00:35:41.777000 audit[3409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc32fdcb8 a2=40 a3=ffffc32fdce8 items=0 ppid=3300 pid=3409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:35:41.777000 audit: BPF prog-id=144 op=UNLOAD Jul 11 00:35:41.777000 audit[3409]: AVC avc: denied { perfmon } for pid=3409 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.777000 audit[3409]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffc32fddd0 a2=50 a3=0 items=0 ppid=3300 pid=3409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit: BPF prog-id=145 op=LOAD Jul 11 00:35:41.779000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff332d6f8 a2=98 a3=fffff332d6e8 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.779000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.779000 audit: BPF prog-id=145 op=UNLOAD Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit: BPF prog-id=146 op=LOAD Jul 11 00:35:41.779000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff332d388 a2=74 a3=95 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.779000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.779000 audit: BPF prog-id=146 op=UNLOAD Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.779000 audit: BPF prog-id=147 op=LOAD Jul 11 00:35:41.779000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff332d3e8 a2=94 a3=2 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.779000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.779000 audit: BPF prog-id=147 op=UNLOAD Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit: BPF prog-id=148 op=LOAD Jul 11 00:35:41.876000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff332d3a8 a2=40 a3=fffff332d3d8 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.876000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.876000 audit: BPF prog-id=148 op=UNLOAD Jul 11 00:35:41.876000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.876000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff332d4c0 a2=50 a3=0 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.876000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff332d418 a2=28 a3=fffff332d548 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff332d448 a2=28 a3=fffff332d578 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff332d2f8 a2=28 a3=fffff332d428 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff332d468 a2=28 a3=fffff332d598 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff332d448 a2=28 a3=fffff332d578 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff332d438 a2=28 a3=fffff332d568 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff332d468 a2=28 a3=fffff332d598 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff332d448 a2=28 a3=fffff332d578 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff332d468 a2=28 a3=fffff332d598 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff332d438 a2=28 a3=fffff332d568 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff332d4b8 a2=28 a3=fffff332d5f8 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff332d1f0 a2=50 a3=0 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit: BPF prog-id=149 op=LOAD Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff332d1f8 a2=94 a3=5 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit: BPF prog-id=149 op=UNLOAD Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff332d300 a2=50 a3=0 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff332d448 a2=4 a3=3 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.887000 audit[3410]: AVC avc: denied { confidentiality } for pid=3410 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:35:41.887000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff332d428 a2=94 a3=6 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { confidentiality } for pid=3410 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:35:41.888000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff332cbf8 a2=94 a3=83 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { perfmon } for pid=3410 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { bpf } for pid=3410 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.888000 audit[3410]: AVC avc: denied { confidentiality } for pid=3410 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:35:41.888000 audit[3410]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff332cbf8 a2=94 a3=83 items=0 ppid=3300 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.907000 audit: BPF prog-id=150 op=LOAD Jul 11 00:35:41.907000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd2eff758 a2=98 a3=ffffd2eff748 items=0 ppid=3300 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.907000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:35:41.908000 audit: BPF prog-id=150 op=UNLOAD Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit: BPF prog-id=151 op=LOAD Jul 11 00:35:41.908000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd2eff608 a2=74 a3=95 items=0 ppid=3300 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.908000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:35:41.908000 audit: BPF prog-id=151 op=UNLOAD Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:41.908000 audit: BPF prog-id=152 op=LOAD Jul 11 00:35:41.908000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd2eff638 a2=40 a3=ffffd2eff668 items=0 ppid=3300 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:41.908000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:35:41.908000 audit: BPF prog-id=152 op=UNLOAD Jul 11 00:35:41.973728 systemd-networkd[1047]: calif71b866cbf0: Link UP Jul 11 00:35:41.975897 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:35:41.976060 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif71b866cbf0: link becomes ready Jul 11 00:35:41.976046 systemd-networkd[1047]: calif71b866cbf0: Gained carrier Jul 11 00:35:41.980873 systemd-networkd[1047]: vxlan.calico: Link UP Jul 11 00:35:41.980881 systemd-networkd[1047]: vxlan.calico: Gained carrier Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.845 [INFO][3411] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0 whisker-78f4b6c6c5- calico-system 1c5aa209-9df0-4070-b38c-bebfc8921c1d 920 0 2025-07-11 00:35:41 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:78f4b6c6c5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-78f4b6c6c5-zwxj9 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calif71b866cbf0 [] [] }} ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.846 [INFO][3411] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.906 [INFO][3425] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" HandleID="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Workload="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.907 [INFO][3425] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" HandleID="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Workload="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a1420), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-78f4b6c6c5-zwxj9", "timestamp":"2025-07-11 00:35:41.906842096 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.907 [INFO][3425] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.907 [INFO][3425] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.907 [INFO][3425] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.920 [INFO][3425] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.939 [INFO][3425] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.943 [INFO][3425] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.945 [INFO][3425] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.950 [INFO][3425] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.950 [INFO][3425] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.954 [INFO][3425] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.958 [INFO][3425] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.962 [INFO][3425] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.962 [INFO][3425] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" host="localhost" Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.962 [INFO][3425] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:42.002907 env[1218]: 2025-07-11 00:35:41.962 [INFO][3425] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" HandleID="k8s-pod-network.1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Workload="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.003482 env[1218]: 2025-07-11 00:35:41.964 [INFO][3411] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0", GenerateName:"whisker-78f4b6c6c5-", Namespace:"calico-system", SelfLink:"", UID:"1c5aa209-9df0-4070-b38c-bebfc8921c1d", ResourceVersion:"920", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"78f4b6c6c5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-78f4b6c6c5-zwxj9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif71b866cbf0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:42.003482 env[1218]: 2025-07-11 00:35:41.964 [INFO][3411] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.003482 env[1218]: 2025-07-11 00:35:41.966 [INFO][3411] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif71b866cbf0 ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.003482 env[1218]: 2025-07-11 00:35:41.976 [INFO][3411] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.003482 env[1218]: 2025-07-11 00:35:41.976 [INFO][3411] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0", GenerateName:"whisker-78f4b6c6c5-", Namespace:"calico-system", SelfLink:"", UID:"1c5aa209-9df0-4070-b38c-bebfc8921c1d", ResourceVersion:"920", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"78f4b6c6c5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a", Pod:"whisker-78f4b6c6c5-zwxj9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif71b866cbf0", MAC:"fe:6d:34:f1:24:f4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:42.003482 env[1218]: 2025-07-11 00:35:41.996 [INFO][3411] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a" Namespace="calico-system" Pod="whisker-78f4b6c6c5-zwxj9" WorkloadEndpoint="localhost-k8s-whisker--78f4b6c6c5--zwxj9-eth0" Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit: BPF prog-id=153 op=LOAD Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc4edf6b8 a2=98 a3=ffffc4edf6a8 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit: BPF prog-id=153 op=UNLOAD Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit: BPF prog-id=154 op=LOAD Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc4edf398 a2=74 a3=95 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit: BPF prog-id=154 op=UNLOAD Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit: BPF prog-id=155 op=LOAD Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc4edf3f8 a2=94 a3=2 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit: BPF prog-id=155 op=UNLOAD Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc4edf428 a2=28 a3=ffffc4edf558 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc4edf458 a2=28 a3=ffffc4edf588 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc4edf308 a2=28 a3=ffffc4edf438 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc4edf478 a2=28 a3=ffffc4edf5a8 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc4edf458 a2=28 a3=ffffc4edf588 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc4edf448 a2=28 a3=ffffc4edf578 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.008000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.008000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc4edf478 a2=28 a3=ffffc4edf5a8 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc4edf458 a2=28 a3=ffffc4edf588 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc4edf478 a2=28 a3=ffffc4edf5a8 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc4edf448 a2=28 a3=ffffc4edf578 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc4edf4c8 a2=28 a3=ffffc4edf608 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit: BPF prog-id=156 op=LOAD Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc4edf2e8 a2=40 a3=ffffc4edf318 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit: BPF prog-id=156 op=UNLOAD Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffc4edf310 a2=50 a3=0 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffc4edf310 a2=50 a3=0 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit: BPF prog-id=157 op=LOAD Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc4edea78 a2=94 a3=2 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.009000 audit: BPF prog-id=157 op=UNLOAD Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.009000 audit: BPF prog-id=158 op=LOAD Jul 11 00:35:42.009000 audit[3470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc4edec08 a2=94 a3=30 items=0 ppid=3300 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.011000 audit: BPF prog-id=159 op=LOAD Jul 11 00:35:42.011000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffff9c0d18 a2=98 a3=ffffff9c0d08 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.011000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.012000 audit: BPF prog-id=159 op=UNLOAD Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit: BPF prog-id=160 op=LOAD Jul 11 00:35:42.012000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff9c09a8 a2=74 a3=95 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.012000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.012000 audit: BPF prog-id=160 op=UNLOAD Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.012000 audit: BPF prog-id=161 op=LOAD Jul 11 00:35:42.012000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff9c0a08 a2=94 a3=2 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.012000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.012000 audit: BPF prog-id=161 op=UNLOAD Jul 11 00:35:42.037889 env[1218]: time="2025-07-11T00:35:42.037815079Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:42.037889 env[1218]: time="2025-07-11T00:35:42.037856640Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:42.038066 env[1218]: time="2025-07-11T00:35:42.037866640Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:42.038374 env[1218]: time="2025-07-11T00:35:42.038294255Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a pid=3488 runtime=io.containerd.runc.v2 Jul 11 00:35:42.054089 systemd[1]: Started cri-containerd-1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a.scope. Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.084000 audit: BPF prog-id=162 op=LOAD Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3488 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162343563336632386264353764663337643762336462393164313339 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3488 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162343563336632386264353764663337643762336462393164313339 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit: BPF prog-id=163 op=LOAD Jul 11 00:35:42.085000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3488 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162343563336632386264353764663337643762336462393164313339 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit: BPF prog-id=164 op=LOAD Jul 11 00:35:42.085000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3488 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162343563336632386264353764663337643762336462393164313339 Jul 11 00:35:42.085000 audit: BPF prog-id=164 op=UNLOAD Jul 11 00:35:42.085000 audit: BPF prog-id=163 op=UNLOAD Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.085000 audit: BPF prog-id=165 op=LOAD Jul 11 00:35:42.085000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3488 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162343563336632386264353764663337643762336462393164313339 Jul 11 00:35:42.088480 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:42.105672 env[1218]: time="2025-07-11T00:35:42.105630863Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-78f4b6c6c5-zwxj9,Uid:1c5aa209-9df0-4070-b38c-bebfc8921c1d,Namespace:calico-system,Attempt:0,} returns sandbox id \"1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a\"" Jul 11 00:35:42.108452 env[1218]: time="2025-07-11T00:35:42.108423477Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit: BPF prog-id=166 op=LOAD Jul 11 00:35:42.110000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff9c09c8 a2=40 a3=ffffff9c09f8 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.110000 audit: BPF prog-id=166 op=UNLOAD Jul 11 00:35:42.110000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.110000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffff9c0ae0 a2=50 a3=0 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff9c0a38 a2=28 a3=ffffff9c0b68 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff9c0a68 a2=28 a3=ffffff9c0b98 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff9c0918 a2=28 a3=ffffff9c0a48 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff9c0a88 a2=28 a3=ffffff9c0bb8 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff9c0a68 a2=28 a3=ffffff9c0b98 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff9c0a58 a2=28 a3=ffffff9c0b88 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff9c0a88 a2=28 a3=ffffff9c0bb8 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff9c0a68 a2=28 a3=ffffff9c0b98 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff9c0a88 a2=28 a3=ffffff9c0bb8 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff9c0a58 a2=28 a3=ffffff9c0b88 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff9c0ad8 a2=28 a3=ffffff9c0c18 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffff9c0810 a2=50 a3=0 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.119000 audit: BPF prog-id=167 op=LOAD Jul 11 00:35:42.119000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffff9c0818 a2=94 a3=5 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.119000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.120000 audit: BPF prog-id=167 op=UNLOAD Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffff9c0920 a2=50 a3=0 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.120000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffff9c0a68 a2=4 a3=3 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.120000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { confidentiality } for pid=3472 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:35:42.120000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff9c0a48 a2=94 a3=6 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.120000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { confidentiality } for pid=3472 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:35:42.120000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff9c0218 a2=94 a3=83 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.120000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.120000 audit[3472]: AVC avc: denied { confidentiality } for pid=3472 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:35:42.120000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff9c0218 a2=94 a3=83 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.120000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.121000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.121000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff9c1c58 a2=10 a3=ffffff9c1d48 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.121000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.121000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.121000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff9c1b18 a2=10 a3=ffffff9c1c08 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.121000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.121000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.121000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff9c1a88 a2=10 a3=ffffff9c1c08 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.121000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.121000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:42.121000 audit[3472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff9c1a88 a2=10 a3=ffffff9c1c08 items=0 ppid=3300 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.121000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:35:42.133000 audit: BPF prog-id=158 op=UNLOAD Jul 11 00:35:42.187000 audit[3542]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:42.187000 audit[3542]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffa1cae40 a2=0 a3=ffffa7ce9fa8 items=0 ppid=3300 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.187000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:42.190000 audit[3541]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3541 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:42.190000 audit[3541]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffffbe97060 a2=0 a3=ffffbca89fa8 items=0 ppid=3300 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.190000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:42.193000 audit[3545]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3545 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:42.193000 audit[3545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffc60fdb10 a2=0 a3=ffffac7b2fa8 items=0 ppid=3300 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.193000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:42.197000 audit[3543]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:42.197000 audit[3543]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff83c3d70 a2=0 a3=ffffa3b41fa8 items=0 ppid=3300 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.197000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:42.219000 audit[3553]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3553 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:42.219000 audit[3553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=ffffce253c90 a2=0 a3=ffff98c3ffa8 items=0 ppid=3300 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:42.219000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:43.245401 kubelet[1950]: I0711 00:35:43.245311 1950 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="15102414-b9ad-4762-a826-4507031afab8" path="/var/lib/kubelet/pods/15102414-b9ad-4762-a826-4507031afab8/volumes" Jul 11 00:35:43.281510 systemd-networkd[1047]: vxlan.calico: Gained IPv6LL Jul 11 00:35:43.313282 env[1218]: time="2025-07-11T00:35:43.313243038Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:43.314690 env[1218]: time="2025-07-11T00:35:43.314654605Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:43.316609 env[1218]: time="2025-07-11T00:35:43.316569708Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:43.318151 env[1218]: time="2025-07-11T00:35:43.318124480Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:43.318631 env[1218]: time="2025-07-11T00:35:43.318609216Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 11 00:35:43.322442 env[1218]: time="2025-07-11T00:35:43.322408741Z" level=info msg="CreateContainer within sandbox \"1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 11 00:35:43.332201 env[1218]: time="2025-07-11T00:35:43.332165184Z" level=info msg="CreateContainer within sandbox \"1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"1d3cdab2e0f637507967add7b83eb01b904ad5e234c7e6111aa2e84361ab8ad1\"" Jul 11 00:35:43.332932 env[1218]: time="2025-07-11T00:35:43.332827605Z" level=info msg="StartContainer for \"1d3cdab2e0f637507967add7b83eb01b904ad5e234c7e6111aa2e84361ab8ad1\"" Jul 11 00:35:43.360481 systemd[1]: Started cri-containerd-1d3cdab2e0f637507967add7b83eb01b904ad5e234c7e6111aa2e84361ab8ad1.scope. Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.398000 audit: BPF prog-id=168 op=LOAD Jul 11 00:35:43.399000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.399000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3488 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:43.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164336364616232653066363337353037393637616464376238336562 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3488 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:43.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164336364616232653066363337353037393637616464376238336562 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit: BPF prog-id=169 op=LOAD Jul 11 00:35:43.400000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3488 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:43.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164336364616232653066363337353037393637616464376238336562 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.400000 audit: BPF prog-id=170 op=LOAD Jul 11 00:35:43.400000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3488 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:43.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164336364616232653066363337353037393637616464376238336562 Jul 11 00:35:43.401000 audit: BPF prog-id=170 op=UNLOAD Jul 11 00:35:43.401000 audit: BPF prog-id=169 op=UNLOAD Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:43.401000 audit: BPF prog-id=171 op=LOAD Jul 11 00:35:43.401000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3488 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:43.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164336364616232653066363337353037393637616464376238336562 Jul 11 00:35:43.428743 env[1218]: time="2025-07-11T00:35:43.428696253Z" level=info msg="StartContainer for \"1d3cdab2e0f637507967add7b83eb01b904ad5e234c7e6111aa2e84361ab8ad1\" returns successfully" Jul 11 00:35:43.430915 env[1218]: time="2025-07-11T00:35:43.430107620Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 11 00:35:43.454000 audit[3584]: AVC avc: denied { search } for pid=3584 comm="nginx" name="crypto" dev="proc" ino=20094 scontext=system_u:system_r:svirt_lxc_net_t:s0:c482,c739 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 11 00:35:43.455957 kernel: kauditd_printk_skb: 713 callbacks suppressed Jul 11 00:35:43.456047 kernel: audit: type=1400 audit(1752194143.454:1068): avc: denied { search } for pid=3584 comm="nginx" name="crypto" dev="proc" ino=20094 scontext=system_u:system_r:svirt_lxc_net_t:s0:c482,c739 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 11 00:35:43.458809 kernel: audit: type=1300 audit(1752194143.454:1068): arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff9505b958 a2=0 a3=0 items=0 ppid=3488 pid=3584 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c482,c739 key=(null) Jul 11 00:35:43.454000 audit[3584]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff9505b958 a2=0 a3=0 items=0 ppid=3488 pid=3584 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c482,c739 key=(null) Jul 11 00:35:43.454000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 11 00:35:43.464426 kernel: audit: type=1327 audit(1752194143.454:1068): proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 11 00:35:43.792979 systemd-networkd[1047]: calif71b866cbf0: Gained IPv6LL Jul 11 00:35:44.330724 systemd[1]: run-containerd-runc-k8s.io-1d3cdab2e0f637507967add7b83eb01b904ad5e234c7e6111aa2e84361ab8ad1-runc.x5gihg.mount: Deactivated successfully. Jul 11 00:35:45.311671 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1271178723.mount: Deactivated successfully. Jul 11 00:35:45.327497 env[1218]: time="2025-07-11T00:35:45.327456002Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:45.328722 env[1218]: time="2025-07-11T00:35:45.328670200Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:45.330427 env[1218]: time="2025-07-11T00:35:45.330391974Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:45.332159 env[1218]: time="2025-07-11T00:35:45.332137829Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:45.332636 env[1218]: time="2025-07-11T00:35:45.332613644Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 11 00:35:45.337493 env[1218]: time="2025-07-11T00:35:45.337438955Z" level=info msg="CreateContainer within sandbox \"1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 11 00:35:45.352532 env[1218]: time="2025-07-11T00:35:45.352493147Z" level=info msg="CreateContainer within sandbox \"1b45c3f28bd57df37d7b3db91d13920ee1b9e52d8026d92dac17a06608a2d91a\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"58501e9278039d936283f21b5f8c4c2c1b210002b7ac981dee1d50901027d7f8\"" Jul 11 00:35:45.353351 env[1218]: time="2025-07-11T00:35:45.353325413Z" level=info msg="StartContainer for \"58501e9278039d936283f21b5f8c4c2c1b210002b7ac981dee1d50901027d7f8\"" Jul 11 00:35:45.372775 systemd[1]: Started cri-containerd-58501e9278039d936283f21b5f8c4c2c1b210002b7ac981dee1d50901027d7f8.scope. Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411489 kernel: audit: type=1400 audit(1752194145.405:1069): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411579 kernel: audit: type=1400 audit(1752194145.405:1070): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411652 kernel: audit: type=1400 audit(1752194145.405:1071): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413815 kernel: audit: type=1400 audit(1752194145.405:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.418550 kernel: audit: type=1400 audit(1752194145.405:1073): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.418655 kernel: audit: type=1400 audit(1752194145.405:1074): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.423765 kernel: audit: type=1400 audit(1752194145.405:1075): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit: BPF prog-id=172 op=LOAD Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:45.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353031653932373830333964393336323833663231623566386334 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:45.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353031653932373830333964393336323833663231623566386334 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.408000 audit: BPF prog-id=173 op=LOAD Jul 11 00:35:45.408000 audit[3614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:45.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353031653932373830333964393336323833663231623566386334 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.411000 audit: BPF prog-id=174 op=LOAD Jul 11 00:35:45.411000 audit[3614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:45.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353031653932373830333964393336323833663231623566386334 Jul 11 00:35:45.413000 audit: BPF prog-id=174 op=UNLOAD Jul 11 00:35:45.413000 audit: BPF prog-id=173 op=UNLOAD Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:45.413000 audit: BPF prog-id=175 op=LOAD Jul 11 00:35:45.413000 audit[3614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:45.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353031653932373830333964393336323833663231623566386334 Jul 11 00:35:45.443377 env[1218]: time="2025-07-11T00:35:45.443324994Z" level=info msg="StartContainer for \"58501e9278039d936283f21b5f8c4c2c1b210002b7ac981dee1d50901027d7f8\" returns successfully" Jul 11 00:35:46.244375 env[1218]: time="2025-07-11T00:35:46.244322316Z" level=info msg="StopPodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\"" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.286 [INFO][3656] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.286 [INFO][3656] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" iface="eth0" netns="/var/run/netns/cni-0fa22888-d5e7-fab4-aa17-44cde6734a85" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.286 [INFO][3656] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" iface="eth0" netns="/var/run/netns/cni-0fa22888-d5e7-fab4-aa17-44cde6734a85" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.286 [INFO][3656] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" iface="eth0" netns="/var/run/netns/cni-0fa22888-d5e7-fab4-aa17-44cde6734a85" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.286 [INFO][3656] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.286 [INFO][3656] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.307 [INFO][3665] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.307 [INFO][3665] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.307 [INFO][3665] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.316 [WARNING][3665] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.316 [INFO][3665] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.317 [INFO][3665] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:46.321428 env[1218]: 2025-07-11 00:35:46.319 [INFO][3656] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:35:46.325031 env[1218]: time="2025-07-11T00:35:46.324596730Z" level=info msg="TearDown network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" successfully" Jul 11 00:35:46.325031 env[1218]: time="2025-07-11T00:35:46.324633331Z" level=info msg="StopPodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" returns successfully" Jul 11 00:35:46.323505 systemd[1]: run-netns-cni\x2d0fa22888\x2dd5e7\x2dfab4\x2daa17\x2d44cde6734a85.mount: Deactivated successfully. Jul 11 00:35:46.325349 env[1218]: time="2025-07-11T00:35:46.325296232Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f6xhd,Uid:aa53afce-7b9d-4eee-a957-d67d4ca745f5,Namespace:calico-system,Attempt:1,}" Jul 11 00:35:46.420967 kubelet[1950]: I0711 00:35:46.419388 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-78f4b6c6c5-zwxj9" podStartSLOduration=2.193606251 podStartE2EDuration="5.419371308s" podCreationTimestamp="2025-07-11 00:35:41 +0000 UTC" firstStartedPulling="2025-07-11 00:35:42.108096946 +0000 UTC m=+38.968665534" lastFinishedPulling="2025-07-11 00:35:45.333861963 +0000 UTC m=+42.194430591" observedRunningTime="2025-07-11 00:35:46.418620285 +0000 UTC m=+43.279188913" watchObservedRunningTime="2025-07-11 00:35:46.419371308 +0000 UTC m=+43.279939936" Jul 11 00:35:46.434000 audit[3697]: NETFILTER_CFG table=filter:106 family=2 entries=19 op=nft_register_rule pid=3697 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:46.434000 audit[3697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc4e33260 a2=0 a3=1 items=0 ppid=2063 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:46.437368 systemd-networkd[1047]: cali4d763442b49: Link UP Jul 11 00:35:46.439450 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:35:46.439518 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4d763442b49: link becomes ready Jul 11 00:35:46.439427 systemd-networkd[1047]: cali4d763442b49: Gained carrier Jul 11 00:35:46.442000 audit[3697]: NETFILTER_CFG table=nat:107 family=2 entries=21 op=nft_register_chain pid=3697 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:46.442000 audit[3697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffc4e33260 a2=0 a3=1 items=0 ppid=2063 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.442000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.365 [INFO][3673] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--f6xhd-eth0 csi-node-driver- calico-system aa53afce-7b9d-4eee-a957-d67d4ca745f5 944 0 2025-07-11 00:35:26 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-f6xhd eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali4d763442b49 [] [] }} ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.365 [INFO][3673] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.388 [INFO][3688] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" HandleID="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.388 [INFO][3688] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" HandleID="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3200), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-f6xhd", "timestamp":"2025-07-11 00:35:46.388576687 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.388 [INFO][3688] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.388 [INFO][3688] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.388 [INFO][3688] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.400 [INFO][3688] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.405 [INFO][3688] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.412 [INFO][3688] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.415 [INFO][3688] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.419 [INFO][3688] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.419 [INFO][3688] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.420 [INFO][3688] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.427 [INFO][3688] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.433 [INFO][3688] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.433 [INFO][3688] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" host="localhost" Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.433 [INFO][3688] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:46.452546 env[1218]: 2025-07-11 00:35:46.433 [INFO][3688] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" HandleID="k8s-pod-network.0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.453263 env[1218]: 2025-07-11 00:35:46.435 [INFO][3673] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f6xhd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aa53afce-7b9d-4eee-a957-d67d4ca745f5", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-f6xhd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4d763442b49", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:46.453263 env[1218]: 2025-07-11 00:35:46.435 [INFO][3673] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.453263 env[1218]: 2025-07-11 00:35:46.435 [INFO][3673] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4d763442b49 ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.453263 env[1218]: 2025-07-11 00:35:46.440 [INFO][3673] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.453263 env[1218]: 2025-07-11 00:35:46.440 [INFO][3673] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f6xhd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aa53afce-7b9d-4eee-a957-d67d4ca745f5", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b", Pod:"csi-node-driver-f6xhd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4d763442b49", MAC:"ca:67:f3:60:81:c3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:46.453263 env[1218]: 2025-07-11 00:35:46.448 [INFO][3673] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b" Namespace="calico-system" Pod="csi-node-driver-f6xhd" WorkloadEndpoint="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:35:46.459000 audit[3709]: NETFILTER_CFG table=filter:108 family=2 entries=36 op=nft_register_chain pid=3709 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:46.459000 audit[3709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19576 a0=3 a1=ffffd62fa310 a2=0 a3=ffff9c555fa8 items=0 ppid=3300 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.459000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:46.462596 env[1218]: time="2025-07-11T00:35:46.462535748Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:46.462596 env[1218]: time="2025-07-11T00:35:46.462575469Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:46.462596 env[1218]: time="2025-07-11T00:35:46.462585510Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:46.462750 env[1218]: time="2025-07-11T00:35:46.462715794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b pid=3717 runtime=io.containerd.runc.v2 Jul 11 00:35:46.481740 systemd[1]: Started cri-containerd-0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b.scope. Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.496000 audit: BPF prog-id=176 op=LOAD Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3717 pid=3727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353364646464393064343866356332653839353738323633303064 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3717 pid=3727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353364646464393064343866356332653839353738323633303064 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit: BPF prog-id=177 op=LOAD Jul 11 00:35:46.497000 audit[3727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3717 pid=3727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353364646464393064343866356332653839353738323633303064 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit: BPF prog-id=178 op=LOAD Jul 11 00:35:46.497000 audit[3727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3717 pid=3727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353364646464393064343866356332653839353738323633303064 Jul 11 00:35:46.497000 audit: BPF prog-id=178 op=UNLOAD Jul 11 00:35:46.497000 audit: BPF prog-id=177 op=UNLOAD Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { perfmon } for pid=3727 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit[3727]: AVC avc: denied { bpf } for pid=3727 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:46.497000 audit: BPF prog-id=179 op=LOAD Jul 11 00:35:46.497000 audit[3727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3717 pid=3727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:46.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353364646464393064343866356332653839353738323633303064 Jul 11 00:35:46.499844 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:46.509379 env[1218]: time="2025-07-11T00:35:46.509338779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-f6xhd,Uid:aa53afce-7b9d-4eee-a957-d67d4ca745f5,Namespace:calico-system,Attempt:1,} returns sandbox id \"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b\"" Jul 11 00:35:46.510740 env[1218]: time="2025-07-11T00:35:46.510712861Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 11 00:35:47.247587 env[1218]: time="2025-07-11T00:35:47.247062760Z" level=info msg="StopPodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\"" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.294 [INFO][3766] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.294 [INFO][3766] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" iface="eth0" netns="/var/run/netns/cni-f360f7b7-3e72-7867-0d8c-eff30335a87b" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.294 [INFO][3766] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" iface="eth0" netns="/var/run/netns/cni-f360f7b7-3e72-7867-0d8c-eff30335a87b" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.294 [INFO][3766] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" iface="eth0" netns="/var/run/netns/cni-f360f7b7-3e72-7867-0d8c-eff30335a87b" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.295 [INFO][3766] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.295 [INFO][3766] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.323 [INFO][3774] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.323 [INFO][3774] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.323 [INFO][3774] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.333 [WARNING][3774] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.333 [INFO][3774] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.335 [INFO][3774] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:47.339184 env[1218]: 2025-07-11 00:35:47.337 [INFO][3766] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:35:47.341929 env[1218]: time="2025-07-11T00:35:47.341550101Z" level=info msg="TearDown network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" successfully" Jul 11 00:35:47.341929 env[1218]: time="2025-07-11T00:35:47.341591662Z" level=info msg="StopPodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" returns successfully" Jul 11 00:35:47.341417 systemd[1]: run-netns-cni\x2df360f7b7\x2d3e72\x2d7867\x2d0d8c\x2deff30335a87b.mount: Deactivated successfully. Jul 11 00:35:47.342625 env[1218]: time="2025-07-11T00:35:47.342594372Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-8xrrm,Uid:f34c3f6f-9cd6-4fc8-9173-2094547bf9dc,Namespace:calico-system,Attempt:1,}" Jul 11 00:35:47.469473 systemd-networkd[1047]: cali293975dfcf9: Link UP Jul 11 00:35:47.472064 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:35:47.472637 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali293975dfcf9: link becomes ready Jul 11 00:35:47.472202 systemd-networkd[1047]: cali293975dfcf9: Gained carrier Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.386 [INFO][3782] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0 goldmane-768f4c5c69- calico-system f34c3f6f-9cd6-4fc8-9173-2094547bf9dc 958 0 2025-07-11 00:35:25 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-8xrrm eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali293975dfcf9 [] [] }} ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.386 [INFO][3782] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.411 [INFO][3799] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" HandleID="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.411 [INFO][3799] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" HandleID="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c7d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-8xrrm", "timestamp":"2025-07-11 00:35:47.411391746 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.411 [INFO][3799] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.412 [INFO][3799] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.412 [INFO][3799] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.422 [INFO][3799] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.433 [INFO][3799] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.438 [INFO][3799] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.440 [INFO][3799] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.443 [INFO][3799] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.443 [INFO][3799] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.449 [INFO][3799] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6 Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.457 [INFO][3799] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.464 [INFO][3799] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.464 [INFO][3799] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" host="localhost" Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.464 [INFO][3799] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:47.490139 env[1218]: 2025-07-11 00:35:47.465 [INFO][3799] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" HandleID="k8s-pod-network.ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.492211 env[1218]: 2025-07-11 00:35:47.467 [INFO][3782] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-8xrrm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali293975dfcf9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:47.492211 env[1218]: 2025-07-11 00:35:47.467 [INFO][3782] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.492211 env[1218]: 2025-07-11 00:35:47.467 [INFO][3782] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali293975dfcf9 ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.492211 env[1218]: 2025-07-11 00:35:47.474 [INFO][3782] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.492211 env[1218]: 2025-07-11 00:35:47.475 [INFO][3782] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6", Pod:"goldmane-768f4c5c69-8xrrm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali293975dfcf9", MAC:"ae:c4:49:75:c8:bb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:47.492211 env[1218]: 2025-07-11 00:35:47.487 [INFO][3782] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6" Namespace="calico-system" Pod="goldmane-768f4c5c69-8xrrm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:35:47.501000 audit[3818]: NETFILTER_CFG table=filter:109 family=2 entries=48 op=nft_register_chain pid=3818 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:47.501000 audit[3818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26368 a0=3 a1=ffffee013480 a2=0 a3=ffff9da47fa8 items=0 ppid=3300 pid=3818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.501000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:47.542156 env[1218]: time="2025-07-11T00:35:47.542086609Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:47.542156 env[1218]: time="2025-07-11T00:35:47.542129210Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:47.542156 env[1218]: time="2025-07-11T00:35:47.542139410Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:47.542482 env[1218]: time="2025-07-11T00:35:47.542437139Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6 pid=3826 runtime=io.containerd.runc.v2 Jul 11 00:35:47.559669 systemd[1]: Started cri-containerd-ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6.scope. Jul 11 00:35:47.569682 systemd-networkd[1047]: cali4d763442b49: Gained IPv6LL Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.591000 audit: BPF prog-id=180 op=LOAD Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3826 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565303633373531376664376431323536616638323561363662303561 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3826 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565303633373531376664376431323536616638323561363662303561 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit: BPF prog-id=181 op=LOAD Jul 11 00:35:47.592000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3826 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565303633373531376664376431323536616638323561363662303561 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit: BPF prog-id=182 op=LOAD Jul 11 00:35:47.592000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3826 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565303633373531376664376431323536616638323561363662303561 Jul 11 00:35:47.592000 audit: BPF prog-id=182 op=UNLOAD Jul 11 00:35:47.592000 audit: BPF prog-id=181 op=UNLOAD Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.592000 audit: BPF prog-id=183 op=LOAD Jul 11 00:35:47.592000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3826 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565303633373531376664376431323536616638323561363662303561 Jul 11 00:35:47.597000 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:47.613617 env[1218]: time="2025-07-11T00:35:47.613569663Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-8xrrm,Uid:f34c3f6f-9cd6-4fc8-9173-2094547bf9dc,Namespace:calico-system,Attempt:1,} returns sandbox id \"ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6\"" Jul 11 00:35:47.686441 env[1218]: time="2025-07-11T00:35:47.686385437Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:47.687849 env[1218]: time="2025-07-11T00:35:47.687818160Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:47.689589 env[1218]: time="2025-07-11T00:35:47.689422168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:47.691016 env[1218]: time="2025-07-11T00:35:47.690987494Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:47.691465 env[1218]: time="2025-07-11T00:35:47.691435508Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 11 00:35:47.694670 env[1218]: time="2025-07-11T00:35:47.694642724Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 11 00:35:47.697420 env[1218]: time="2025-07-11T00:35:47.697384845Z" level=info msg="CreateContainer within sandbox \"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 11 00:35:47.708390 env[1218]: time="2025-07-11T00:35:47.708351133Z" level=info msg="CreateContainer within sandbox \"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"b87e685176ce16fca164418f8df4bbe9c160b9832019ce154d51eef4f572b585\"" Jul 11 00:35:47.708834 env[1218]: time="2025-07-11T00:35:47.708787786Z" level=info msg="StartContainer for \"b87e685176ce16fca164418f8df4bbe9c160b9832019ce154d51eef4f572b585\"" Jul 11 00:35:47.725041 systemd[1]: Started cri-containerd-b87e685176ce16fca164418f8df4bbe9c160b9832019ce154d51eef4f572b585.scope. Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3717 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238376536383531373663653136666361313634343138663864663462 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit: BPF prog-id=184 op=LOAD Jul 11 00:35:47.744000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3717 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238376536383531373663653136666361313634343138663864663462 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit: BPF prog-id=185 op=LOAD Jul 11 00:35:47.744000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3717 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238376536383531373663653136666361313634343138663864663462 Jul 11 00:35:47.744000 audit: BPF prog-id=185 op=UNLOAD Jul 11 00:35:47.744000 audit: BPF prog-id=184 op=UNLOAD Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { perfmon } for pid=3866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit[3866]: AVC avc: denied { bpf } for pid=3866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:47.744000 audit: BPF prog-id=186 op=LOAD Jul 11 00:35:47.744000 audit[3866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3717 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:47.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238376536383531373663653136666361313634343138663864663462 Jul 11 00:35:47.760268 env[1218]: time="2025-07-11T00:35:47.760162120Z" level=info msg="StartContainer for \"b87e685176ce16fca164418f8df4bbe9c160b9832019ce154d51eef4f572b585\" returns successfully" Jul 11 00:35:48.244370 env[1218]: time="2025-07-11T00:35:48.244310171Z" level=info msg="StopPodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\"" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.288 [INFO][3905] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.289 [INFO][3905] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" iface="eth0" netns="/var/run/netns/cni-7bc7ab46-9fba-a456-bb2a-019878d761be" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.289 [INFO][3905] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" iface="eth0" netns="/var/run/netns/cni-7bc7ab46-9fba-a456-bb2a-019878d761be" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.289 [INFO][3905] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" iface="eth0" netns="/var/run/netns/cni-7bc7ab46-9fba-a456-bb2a-019878d761be" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.289 [INFO][3905] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.289 [INFO][3905] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.312 [INFO][3914] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.313 [INFO][3914] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.313 [INFO][3914] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.321 [WARNING][3914] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.321 [INFO][3914] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.322 [INFO][3914] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:48.326464 env[1218]: 2025-07-11 00:35:48.324 [INFO][3905] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:35:48.327023 env[1218]: time="2025-07-11T00:35:48.326606172Z" level=info msg="TearDown network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" successfully" Jul 11 00:35:48.327023 env[1218]: time="2025-07-11T00:35:48.326637773Z" level=info msg="StopPodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" returns successfully" Jul 11 00:35:48.327275 env[1218]: time="2025-07-11T00:35:48.327245031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-q2wgx,Uid:34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:35:48.353365 systemd[1]: run-netns-cni\x2d7bc7ab46\x2d9fba\x2da456\x2dbb2a\x2d019878d761be.mount: Deactivated successfully. Jul 11 00:35:48.439132 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid8cedab7db0: link becomes ready Jul 11 00:35:48.438720 systemd-networkd[1047]: calid8cedab7db0: Link UP Jul 11 00:35:48.439029 systemd-networkd[1047]: calid8cedab7db0: Gained carrier Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.370 [INFO][3922] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0 calico-apiserver-84db954f75- calico-apiserver 34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7 971 0 2025-07-11 00:35:21 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84db954f75 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-84db954f75-q2wgx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid8cedab7db0 [] [] }} ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.370 [INFO][3922] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.394 [INFO][3936] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" HandleID="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.394 [INFO][3936] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" HandleID="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000590ae0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-84db954f75-q2wgx", "timestamp":"2025-07-11 00:35:48.394055341 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.394 [INFO][3936] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.394 [INFO][3936] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.394 [INFO][3936] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.404 [INFO][3936] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.408 [INFO][3936] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.418 [INFO][3936] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.419 [INFO][3936] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.422 [INFO][3936] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.422 [INFO][3936] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.423 [INFO][3936] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0 Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.427 [INFO][3936] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.431 [INFO][3936] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.432 [INFO][3936] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" host="localhost" Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.432 [INFO][3936] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:48.454388 env[1218]: 2025-07-11 00:35:48.432 [INFO][3936] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" HandleID="k8s-pod-network.6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.454990 env[1218]: 2025-07-11 00:35:48.434 [INFO][3922] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-84db954f75-q2wgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid8cedab7db0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:48.454990 env[1218]: 2025-07-11 00:35:48.434 [INFO][3922] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.454990 env[1218]: 2025-07-11 00:35:48.434 [INFO][3922] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid8cedab7db0 ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.454990 env[1218]: 2025-07-11 00:35:48.439 [INFO][3922] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.454990 env[1218]: 2025-07-11 00:35:48.439 [INFO][3922] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0", Pod:"calico-apiserver-84db954f75-q2wgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid8cedab7db0", MAC:"86:ce:09:23:62:5a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:48.454990 env[1218]: 2025-07-11 00:35:48.448 [INFO][3922] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-q2wgx" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:35:48.471824 kernel: kauditd_printk_skb: 219 callbacks suppressed Jul 11 00:35:48.471919 kernel: audit: type=1325 audit(1752194148.465:1133): table=filter:110 family=2 entries=58 op=nft_register_chain pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:48.471941 kernel: audit: type=1300 audit(1752194148.465:1133): arch=c00000b7 syscall=211 success=yes exit=30584 a0=3 a1=ffffdbe67980 a2=0 a3=ffff9f96ffa8 items=0 ppid=3300 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.465000 audit[3956]: NETFILTER_CFG table=filter:110 family=2 entries=58 op=nft_register_chain pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:48.465000 audit[3956]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30584 a0=3 a1=ffffdbe67980 a2=0 a3=ffff9f96ffa8 items=0 ppid=3300 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.473470 env[1218]: time="2025-07-11T00:35:48.473390816Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:48.473470 env[1218]: time="2025-07-11T00:35:48.473435097Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:48.473470 env[1218]: time="2025-07-11T00:35:48.473445377Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:48.465000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:48.474009 env[1218]: time="2025-07-11T00:35:48.473953072Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0 pid=3961 runtime=io.containerd.runc.v2 Jul 11 00:35:48.477505 kernel: audit: type=1327 audit(1752194148.465:1133): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:48.486598 systemd[1]: run-containerd-runc-k8s.io-6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0-runc.6XVCR4.mount: Deactivated successfully. Jul 11 00:35:48.489140 systemd[1]: Started cri-containerd-6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0.scope. Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.528442 kernel: audit: type=1400 audit(1752194148.522:1134): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.528528 kernel: audit: type=1400 audit(1752194148.522:1135): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.528553 kernel: audit: type=1400 audit(1752194148.522:1136): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.533272 kernel: audit: type=1400 audit(1752194148.522:1137): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.533314 kernel: audit: type=1400 audit(1752194148.522:1138): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.538136 kernel: audit: type=1400 audit(1752194148.522:1139): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.538264 kernel: audit: type=1400 audit(1752194148.522:1140): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.538205 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit: BPF prog-id=187 op=LOAD Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3961 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662356137303736313361306263336463623234396264343466623430 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3961 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662356137303736313361306263336463623234396264343466623430 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.525000 audit: BPF prog-id=188 op=LOAD Jul 11 00:35:48.525000 audit[3970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3961 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662356137303736313361306263336463623234396264343466623430 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.527000 audit: BPF prog-id=189 op=LOAD Jul 11 00:35:48.527000 audit[3970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3961 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662356137303736313361306263336463623234396264343466623430 Jul 11 00:35:48.530000 audit: BPF prog-id=189 op=UNLOAD Jul 11 00:35:48.530000 audit: BPF prog-id=188 op=UNLOAD Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:48.530000 audit: BPF prog-id=190 op=LOAD Jul 11 00:35:48.530000 audit[3970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3961 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:48.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662356137303736313361306263336463623234396264343466623430 Jul 11 00:35:48.557763 env[1218]: time="2025-07-11T00:35:48.557725037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-q2wgx,Uid:34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0\"" Jul 11 00:35:48.848924 systemd-networkd[1047]: cali293975dfcf9: Gained IPv6LL Jul 11 00:35:49.245057 env[1218]: time="2025-07-11T00:35:49.244894016Z" level=info msg="StopPodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\"" Jul 11 00:35:49.245882 env[1218]: time="2025-07-11T00:35:49.245845244Z" level=info msg="StopPodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\"" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.293 [INFO][4018] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.293 [INFO][4018] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" iface="eth0" netns="/var/run/netns/cni-bf964db0-6b7d-7fb4-b626-f43b2f119c9c" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.293 [INFO][4018] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" iface="eth0" netns="/var/run/netns/cni-bf964db0-6b7d-7fb4-b626-f43b2f119c9c" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.293 [INFO][4018] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" iface="eth0" netns="/var/run/netns/cni-bf964db0-6b7d-7fb4-b626-f43b2f119c9c" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.293 [INFO][4018] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.293 [INFO][4018] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.331 [INFO][4034] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.331 [INFO][4034] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.331 [INFO][4034] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.340 [WARNING][4034] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.340 [INFO][4034] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.341 [INFO][4034] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:49.346277 env[1218]: 2025-07-11 00:35:49.343 [INFO][4018] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:35:49.346984 env[1218]: time="2025-07-11T00:35:49.346523838Z" level=info msg="TearDown network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" successfully" Jul 11 00:35:49.346984 env[1218]: time="2025-07-11T00:35:49.346572679Z" level=info msg="StopPodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" returns successfully" Jul 11 00:35:49.347244 env[1218]: time="2025-07-11T00:35:49.347217258Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7756745fd8-mrw8v,Uid:0f516b6c-22b6-437e-9f66-5a9deab18e77,Namespace:calico-system,Attempt:1,}" Jul 11 00:35:49.352140 systemd[1]: run-netns-cni\x2dbf964db0\x2d6b7d\x2d7fb4\x2db626\x2df43b2f119c9c.mount: Deactivated successfully. Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.303 [INFO][4017] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.303 [INFO][4017] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" iface="eth0" netns="/var/run/netns/cni-677647c7-c1b1-2a7d-cbc5-798ed066df4f" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.303 [INFO][4017] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" iface="eth0" netns="/var/run/netns/cni-677647c7-c1b1-2a7d-cbc5-798ed066df4f" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.303 [INFO][4017] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" iface="eth0" netns="/var/run/netns/cni-677647c7-c1b1-2a7d-cbc5-798ed066df4f" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.303 [INFO][4017] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.303 [INFO][4017] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.333 [INFO][4040] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.334 [INFO][4040] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.341 [INFO][4040] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.353 [WARNING][4040] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.353 [INFO][4040] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.354 [INFO][4040] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:49.365988 env[1218]: 2025-07-11 00:35:49.362 [INFO][4017] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:35:49.367231 env[1218]: time="2025-07-11T00:35:49.366947221Z" level=info msg="TearDown network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" successfully" Jul 11 00:35:49.367231 env[1218]: time="2025-07-11T00:35:49.366975622Z" level=info msg="StopPodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" returns successfully" Jul 11 00:35:49.367287 kubelet[1950]: E0711 00:35:49.367252 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:49.368298 systemd[1]: run-netns-cni\x2d677647c7\x2dc1b1\x2d2a7d\x2dcbc5\x2d798ed066df4f.mount: Deactivated successfully. Jul 11 00:35:49.370354 env[1218]: time="2025-07-11T00:35:49.370319957Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-99f7p,Uid:73b58247-9efa-480a-953d-bf1785d202fa,Namespace:kube-system,Attempt:1,}" Jul 11 00:35:49.489133 systemd-networkd[1047]: cali9a57fe8eb55: Link UP Jul 11 00:35:49.491216 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:35:49.491308 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9a57fe8eb55: link becomes ready Jul 11 00:35:49.491397 systemd-networkd[1047]: cali9a57fe8eb55: Gained carrier Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.413 [INFO][4049] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0 calico-kube-controllers-7756745fd8- calico-system 0f516b6c-22b6-437e-9f66-5a9deab18e77 978 0 2025-07-11 00:35:26 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7756745fd8 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7756745fd8-mrw8v eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali9a57fe8eb55 [] [] }} ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.413 [INFO][4049] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.450 [INFO][4080] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" HandleID="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.450 [INFO][4080] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" HandleID="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d730), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7756745fd8-mrw8v", "timestamp":"2025-07-11 00:35:49.450321161 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.450 [INFO][4080] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.450 [INFO][4080] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.450 [INFO][4080] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.460 [INFO][4080] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.464 [INFO][4080] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.469 [INFO][4080] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.470 [INFO][4080] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.472 [INFO][4080] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.472 [INFO][4080] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.474 [INFO][4080] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1 Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.477 [INFO][4080] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.483 [INFO][4080] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.483 [INFO][4080] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" host="localhost" Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.483 [INFO][4080] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:49.511964 env[1218]: 2025-07-11 00:35:49.483 [INFO][4080] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" HandleID="k8s-pod-network.09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.513258 env[1218]: 2025-07-11 00:35:49.485 [INFO][4049] cni-plugin/k8s.go 418: Populated endpoint ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0", GenerateName:"calico-kube-controllers-7756745fd8-", Namespace:"calico-system", SelfLink:"", UID:"0f516b6c-22b6-437e-9f66-5a9deab18e77", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7756745fd8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7756745fd8-mrw8v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9a57fe8eb55", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:49.513258 env[1218]: 2025-07-11 00:35:49.486 [INFO][4049] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.513258 env[1218]: 2025-07-11 00:35:49.486 [INFO][4049] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9a57fe8eb55 ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.513258 env[1218]: 2025-07-11 00:35:49.492 [INFO][4049] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.513258 env[1218]: 2025-07-11 00:35:49.493 [INFO][4049] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0", GenerateName:"calico-kube-controllers-7756745fd8-", Namespace:"calico-system", SelfLink:"", UID:"0f516b6c-22b6-437e-9f66-5a9deab18e77", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7756745fd8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1", Pod:"calico-kube-controllers-7756745fd8-mrw8v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9a57fe8eb55", MAC:"fe:cd:86:53:18:f7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:49.513258 env[1218]: 2025-07-11 00:35:49.507 [INFO][4049] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1" Namespace="calico-system" Pod="calico-kube-controllers-7756745fd8-mrw8v" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:35:49.519000 audit[4106]: NETFILTER_CFG table=filter:111 family=2 entries=48 op=nft_register_chain pid=4106 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:49.519000 audit[4106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23140 a0=3 a1=fffff462ea40 a2=0 a3=ffff867c4fa8 items=0 ppid=3300 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.519000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:49.523829 env[1218]: time="2025-07-11T00:35:49.523755897Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:49.523906 env[1218]: time="2025-07-11T00:35:49.523843140Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:49.523906 env[1218]: time="2025-07-11T00:35:49.523873701Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:49.524081 env[1218]: time="2025-07-11T00:35:49.524041666Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1 pid=4114 runtime=io.containerd.runc.v2 Jul 11 00:35:49.534602 systemd[1]: Started cri-containerd-09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1.scope. Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit: BPF prog-id=191 op=LOAD Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4114 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633963376137633665663763356235633962306339383533663230 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4114 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633963376137633665663763356235633962306339383533663230 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit: BPF prog-id=192 op=LOAD Jul 11 00:35:49.596000 audit[4123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4114 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633963376137633665663763356235633962306339383533663230 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit: BPF prog-id=193 op=LOAD Jul 11 00:35:49.596000 audit[4123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4114 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633963376137633665663763356235633962306339383533663230 Jul 11 00:35:49.596000 audit: BPF prog-id=193 op=UNLOAD Jul 11 00:35:49.596000 audit: BPF prog-id=192 op=UNLOAD Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { perfmon } for pid=4123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit[4123]: AVC avc: denied { bpf } for pid=4123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.596000 audit: BPF prog-id=194 op=LOAD Jul 11 00:35:49.596000 audit[4123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4114 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039633963376137633665663763356235633962306339383533663230 Jul 11 00:35:49.599591 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:49.605810 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2239f528d49: link becomes ready Jul 11 00:35:49.607260 systemd-networkd[1047]: cali2239f528d49: Link UP Jul 11 00:35:49.607631 systemd-networkd[1047]: cali2239f528d49: Gained carrier Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.425 [INFO][4063] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--99f7p-eth0 coredns-674b8bbfcf- kube-system 73b58247-9efa-480a-953d-bf1785d202fa 980 0 2025-07-11 00:35:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-99f7p eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2239f528d49 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.425 [INFO][4063] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.456 [INFO][4086] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" HandleID="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.456 [INFO][4086] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" HandleID="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2e70), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-99f7p", "timestamp":"2025-07-11 00:35:49.456521258 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.456 [INFO][4086] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.485 [INFO][4086] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.485 [INFO][4086] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.566 [INFO][4086] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.574 [INFO][4086] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.580 [INFO][4086] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.581 [INFO][4086] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.586 [INFO][4086] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.586 [INFO][4086] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.587 [INFO][4086] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.593 [INFO][4086] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.599 [INFO][4086] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.599 [INFO][4086] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" host="localhost" Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.599 [INFO][4086] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:49.619294 env[1218]: 2025-07-11 00:35:49.599 [INFO][4086] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" HandleID="k8s-pod-network.46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.620145 env[1218]: 2025-07-11 00:35:49.602 [INFO][4063] cni-plugin/k8s.go 418: Populated endpoint ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--99f7p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"73b58247-9efa-480a-953d-bf1785d202fa", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-99f7p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2239f528d49", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:49.620145 env[1218]: 2025-07-11 00:35:49.602 [INFO][4063] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.620145 env[1218]: 2025-07-11 00:35:49.602 [INFO][4063] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2239f528d49 ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.620145 env[1218]: 2025-07-11 00:35:49.604 [INFO][4063] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.620145 env[1218]: 2025-07-11 00:35:49.605 [INFO][4063] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--99f7p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"73b58247-9efa-480a-953d-bf1785d202fa", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf", Pod:"coredns-674b8bbfcf-99f7p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2239f528d49", MAC:"ee:59:bc:dd:95:35", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:49.620145 env[1218]: 2025-07-11 00:35:49.614 [INFO][4063] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf" Namespace="kube-system" Pod="coredns-674b8bbfcf-99f7p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:35:49.637820 env[1218]: time="2025-07-11T00:35:49.635780216Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7756745fd8-mrw8v,Uid:0f516b6c-22b6-437e-9f66-5a9deab18e77,Namespace:calico-system,Attempt:1,} returns sandbox id \"09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1\"" Jul 11 00:35:49.643000 audit[4157]: NETFILTER_CFG table=filter:112 family=2 entries=64 op=nft_register_chain pid=4157 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:49.643000 audit[4157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30156 a0=3 a1=ffffe550c0c0 a2=0 a3=ffff952f4fa8 items=0 ppid=3300 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.643000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:49.680941 systemd-networkd[1047]: calid8cedab7db0: Gained IPv6LL Jul 11 00:35:49.688842 env[1218]: time="2025-07-11T00:35:49.688737127Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:49.688842 env[1218]: time="2025-07-11T00:35:49.688810490Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:49.688842 env[1218]: time="2025-07-11T00:35:49.688821050Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:49.689275 env[1218]: time="2025-07-11T00:35:49.689223861Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf pid=4166 runtime=io.containerd.runc.v2 Jul 11 00:35:49.701962 systemd[1]: Started cri-containerd-46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf.scope. Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit: BPF prog-id=195 op=LOAD Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4166 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436616432326161656336346331623939623462656133343639306531 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4166 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436616432326161656336346331623939623462656133343639306531 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.720000 audit: BPF prog-id=196 op=LOAD Jul 11 00:35:49.720000 audit[4174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4166 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436616432326161656336346331623939623462656133343639306531 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.721000 audit: BPF prog-id=197 op=LOAD Jul 11 00:35:49.721000 audit[4174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4166 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436616432326161656336346331623939623462656133343639306531 Jul 11 00:35:49.722000 audit: BPF prog-id=197 op=UNLOAD Jul 11 00:35:49.722000 audit: BPF prog-id=196 op=UNLOAD Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.722000 audit: BPF prog-id=198 op=LOAD Jul 11 00:35:49.722000 audit[4174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4166 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436616432326161656336346331623939623462656133343639306531 Jul 11 00:35:49.724093 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:49.741568 env[1218]: time="2025-07-11T00:35:49.741518194Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-99f7p,Uid:73b58247-9efa-480a-953d-bf1785d202fa,Namespace:kube-system,Attempt:1,} returns sandbox id \"46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf\"" Jul 11 00:35:49.742780 kubelet[1950]: E0711 00:35:49.742260 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:49.745946 env[1218]: time="2025-07-11T00:35:49.745911200Z" level=info msg="CreateContainer within sandbox \"46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:35:49.757619 env[1218]: time="2025-07-11T00:35:49.757573573Z" level=info msg="CreateContainer within sandbox \"46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"8d566096bef003c6dbd091ef73412933d0a835c4995630885ba72e4f490982eb\"" Jul 11 00:35:49.758043 env[1218]: time="2025-07-11T00:35:49.758013465Z" level=info msg="StartContainer for \"8d566096bef003c6dbd091ef73412933d0a835c4995630885ba72e4f490982eb\"" Jul 11 00:35:49.773051 systemd[1]: Started cri-containerd-8d566096bef003c6dbd091ef73412933d0a835c4995630885ba72e4f490982eb.scope. Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.797000 audit: BPF prog-id=199 op=LOAD Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4166 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353636303936626566303033633664626430393165663733343132 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4166 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353636303936626566303033633664626430393165663733343132 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.798000 audit: BPF prog-id=200 op=LOAD Jul 11 00:35:49.798000 audit[4207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4166 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353636303936626566303033633664626430393165663733343132 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit: BPF prog-id=201 op=LOAD Jul 11 00:35:49.799000 audit[4207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4166 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353636303936626566303033633664626430393165663733343132 Jul 11 00:35:49.799000 audit: BPF prog-id=201 op=UNLOAD Jul 11 00:35:49.799000 audit: BPF prog-id=200 op=UNLOAD Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:49.799000 audit: BPF prog-id=202 op=LOAD Jul 11 00:35:49.799000 audit[4207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4166 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:49.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864353636303936626566303033633664626430393165663733343132 Jul 11 00:35:49.833469 env[1218]: time="2025-07-11T00:35:49.833333696Z" level=info msg="StartContainer for \"8d566096bef003c6dbd091ef73412933d0a835c4995630885ba72e4f490982eb\" returns successfully" Jul 11 00:35:49.895000 audit[4218]: AVC avc: denied { getattr } for pid=4218 comm="coredns" path="cgroup:[4026532591]" dev="nsfs" ino=4026532591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c592 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:35:49.895000 audit[4218]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000134bd0 a2=400013a578 a3=0 items=0 ppid=4166 pid=4218 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c592 key=(null) Jul 11 00:35:49.895000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:35:50.237995 env[1218]: time="2025-07-11T00:35:50.237883504Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:50.240332 env[1218]: time="2025-07-11T00:35:50.240296852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:50.242401 env[1218]: time="2025-07-11T00:35:50.242368869Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:50.243817 env[1218]: time="2025-07-11T00:35:50.243770989Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:50.244991 env[1218]: time="2025-07-11T00:35:50.244954422Z" level=info msg="StopPodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\"" Jul 11 00:35:50.245204 env[1218]: time="2025-07-11T00:35:50.245076225Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 11 00:35:50.245407 env[1218]: time="2025-07-11T00:35:50.245377514Z" level=info msg="StopPodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\"" Jul 11 00:35:50.246530 env[1218]: time="2025-07-11T00:35:50.246487585Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 11 00:35:50.248845 env[1218]: time="2025-07-11T00:35:50.248771768Z" level=info msg="CreateContainer within sandbox \"ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 11 00:35:50.269276 env[1218]: time="2025-07-11T00:35:50.269222620Z" level=info msg="CreateContainer within sandbox \"ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"8144c73fcea51a76103f86f3dd85d30fcd0f2ce4e9266e341d886a9a8a7e6d0a\"" Jul 11 00:35:50.271623 env[1218]: time="2025-07-11T00:35:50.271576046Z" level=info msg="StartContainer for \"8144c73fcea51a76103f86f3dd85d30fcd0f2ce4e9266e341d886a9a8a7e6d0a\"" Jul 11 00:35:50.304953 systemd[1]: Started cri-containerd-8144c73fcea51a76103f86f3dd85d30fcd0f2ce4e9266e341d886a9a8a7e6d0a.scope. Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.340000 audit: BPF prog-id=203 op=LOAD Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3826 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831343463373366636561353161373631303366383666336464383564 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3826 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831343463373366636561353161373631303366383666336464383564 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.341000 audit: BPF prog-id=204 op=LOAD Jul 11 00:35:50.341000 audit[4286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3826 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831343463373366636561353161373631303366383666336464383564 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit: BPF prog-id=205 op=LOAD Jul 11 00:35:50.342000 audit[4286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3826 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831343463373366636561353161373631303366383666336464383564 Jul 11 00:35:50.342000 audit: BPF prog-id=205 op=UNLOAD Jul 11 00:35:50.342000 audit: BPF prog-id=204 op=UNLOAD Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.342000 audit: BPF prog-id=206 op=LOAD Jul 11 00:35:50.342000 audit[4286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3826 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831343463373366636561353161373631303366383666336464383564 Jul 11 00:35:50.354449 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3255956748.mount: Deactivated successfully. Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.297 [INFO][4261] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.297 [INFO][4261] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" iface="eth0" netns="/var/run/netns/cni-77766d08-a02a-4326-3eba-7ba781f7b06f" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.297 [INFO][4261] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" iface="eth0" netns="/var/run/netns/cni-77766d08-a02a-4326-3eba-7ba781f7b06f" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.298 [INFO][4261] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" iface="eth0" netns="/var/run/netns/cni-77766d08-a02a-4326-3eba-7ba781f7b06f" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.298 [INFO][4261] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.298 [INFO][4261] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.330 [INFO][4296] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.331 [INFO][4296] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.331 [INFO][4296] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.343 [WARNING][4296] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.344 [INFO][4296] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.345 [INFO][4296] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:50.354933 env[1218]: 2025-07-11 00:35:50.347 [INFO][4261] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:35:50.359145 env[1218]: time="2025-07-11T00:35:50.359106293Z" level=info msg="TearDown network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" successfully" Jul 11 00:35:50.359260 env[1218]: time="2025-07-11T00:35:50.359242497Z" level=info msg="StopPodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" returns successfully" Jul 11 00:35:50.359598 systemd[1]: run-netns-cni\x2d77766d08\x2da02a\x2d4326\x2d3eba\x2d7ba781f7b06f.mount: Deactivated successfully. Jul 11 00:35:50.360167 env[1218]: time="2025-07-11T00:35:50.359954877Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-ll295,Uid:c726969c-6763-4115-bad6-191a2dd3a838,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.300 [INFO][4263] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.300 [INFO][4263] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" iface="eth0" netns="/var/run/netns/cni-9cdcb6b8-cb22-9cc9-1b94-8d5b53f50cb8" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.300 [INFO][4263] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" iface="eth0" netns="/var/run/netns/cni-9cdcb6b8-cb22-9cc9-1b94-8d5b53f50cb8" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.301 [INFO][4263] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" iface="eth0" netns="/var/run/netns/cni-9cdcb6b8-cb22-9cc9-1b94-8d5b53f50cb8" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.301 [INFO][4263] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.301 [INFO][4263] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.352 [INFO][4303] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.353 [INFO][4303] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.353 [INFO][4303] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.362 [WARNING][4303] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.362 [INFO][4303] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.364 [INFO][4303] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:50.373005 env[1218]: 2025-07-11 00:35:50.367 [INFO][4263] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:35:50.377082 env[1218]: time="2025-07-11T00:35:50.374488323Z" level=info msg="TearDown network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" successfully" Jul 11 00:35:50.377082 env[1218]: time="2025-07-11T00:35:50.374550645Z" level=info msg="StopPodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" returns successfully" Jul 11 00:35:50.377131 systemd[1]: run-netns-cni\x2d9cdcb6b8\x2dcb22\x2d9cc9\x2d1b94\x2d8d5b53f50cb8.mount: Deactivated successfully. Jul 11 00:35:50.377458 kubelet[1950]: E0711 00:35:50.377191 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:50.382915 env[1218]: time="2025-07-11T00:35:50.382869357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kk29p,Uid:02d1f398-f1df-4170-9c80-449337ac7fcc,Namespace:kube-system,Attempt:1,}" Jul 11 00:35:50.393935 env[1218]: time="2025-07-11T00:35:50.393891465Z" level=info msg="StartContainer for \"8144c73fcea51a76103f86f3dd85d30fcd0f2ce4e9266e341d886a9a8a7e6d0a\" returns successfully" Jul 11 00:35:50.434728 kubelet[1950]: E0711 00:35:50.434336 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:50.434728 kubelet[1950]: I0711 00:35:50.434430 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-8xrrm" podStartSLOduration=22.803220847 podStartE2EDuration="25.434415798s" podCreationTimestamp="2025-07-11 00:35:25 +0000 UTC" firstStartedPulling="2025-07-11 00:35:47.614702177 +0000 UTC m=+44.475270765" lastFinishedPulling="2025-07-11 00:35:50.245897088 +0000 UTC m=+47.106465716" observedRunningTime="2025-07-11 00:35:50.433549974 +0000 UTC m=+47.294118602" watchObservedRunningTime="2025-07-11 00:35:50.434415798 +0000 UTC m=+47.294984426" Jul 11 00:35:50.450815 kubelet[1950]: I0711 00:35:50.450730 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-99f7p" podStartSLOduration=39.450713134 podStartE2EDuration="39.450713134s" podCreationTimestamp="2025-07-11 00:35:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:35:50.450466887 +0000 UTC m=+47.311035515" watchObservedRunningTime="2025-07-11 00:35:50.450713134 +0000 UTC m=+47.311281762" Jul 11 00:35:50.477000 audit[4380]: NETFILTER_CFG table=filter:113 family=2 entries=18 op=nft_register_rule pid=4380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:50.477000 audit[4380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffd4192f0 a2=0 a3=1 items=0 ppid=2063 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.477000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:50.482000 audit[4380]: NETFILTER_CFG table=nat:114 family=2 entries=16 op=nft_register_rule pid=4380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:50.482000 audit[4380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffffd4192f0 a2=0 a3=1 items=0 ppid=2063 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.482000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:50.514000 audit[4401]: NETFILTER_CFG table=filter:115 family=2 entries=15 op=nft_register_rule pid=4401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:50.514000 audit[4401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd4685fe0 a2=0 a3=1 items=0 ppid=2063 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.514000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:50.519000 audit[4401]: NETFILTER_CFG table=nat:116 family=2 entries=37 op=nft_register_chain pid=4401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:50.519000 audit[4401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffd4685fe0 a2=0 a3=1 items=0 ppid=2063 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.519000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:50.567504 systemd-networkd[1047]: calicbb97ded65b: Link UP Jul 11 00:35:50.568329 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:35:50.568409 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicbb97ded65b: link becomes ready Jul 11 00:35:50.568914 systemd-networkd[1047]: calicbb97ded65b: Gained carrier Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.447 [INFO][4343] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--kk29p-eth0 coredns-674b8bbfcf- kube-system 02d1f398-f1df-4170-9c80-449337ac7fcc 1000 0 2025-07-11 00:35:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-kk29p eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calicbb97ded65b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.447 [INFO][4343] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.506 [INFO][4374] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" HandleID="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.506 [INFO][4374] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" HandleID="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400035cfe0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-kk29p", "timestamp":"2025-07-11 00:35:50.506303848 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.506 [INFO][4374] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.506 [INFO][4374] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.506 [INFO][4374] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.518 [INFO][4374] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.526 [INFO][4374] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.540 [INFO][4374] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.546 [INFO][4374] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.550 [INFO][4374] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.550 [INFO][4374] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.552 [INFO][4374] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.555 [INFO][4374] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.561 [INFO][4374] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.561 [INFO][4374] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" host="localhost" Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.561 [INFO][4374] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:50.586622 env[1218]: 2025-07-11 00:35:50.561 [INFO][4374] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" HandleID="k8s-pod-network.4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.587225 env[1218]: 2025-07-11 00:35:50.563 [INFO][4343] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kk29p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"02d1f398-f1df-4170-9c80-449337ac7fcc", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-kk29p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbb97ded65b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:50.587225 env[1218]: 2025-07-11 00:35:50.563 [INFO][4343] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.587225 env[1218]: 2025-07-11 00:35:50.563 [INFO][4343] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicbb97ded65b ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.587225 env[1218]: 2025-07-11 00:35:50.568 [INFO][4343] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.587225 env[1218]: 2025-07-11 00:35:50.569 [INFO][4343] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kk29p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"02d1f398-f1df-4170-9c80-449337ac7fcc", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b", Pod:"coredns-674b8bbfcf-kk29p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbb97ded65b", MAC:"12:c1:bf:d9:32:b3", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:50.587225 env[1218]: 2025-07-11 00:35:50.578 [INFO][4343] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b" Namespace="kube-system" Pod="coredns-674b8bbfcf-kk29p" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:35:50.597000 audit[4422]: NETFILTER_CFG table=filter:117 family=2 entries=48 op=nft_register_chain pid=4422 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:50.597000 audit[4422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22704 a0=3 a1=ffffd65da6c0 a2=0 a3=ffffab2b4fa8 items=0 ppid=3300 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.597000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:50.599291 env[1218]: time="2025-07-11T00:35:50.599120962Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:50.599291 env[1218]: time="2025-07-11T00:35:50.599166644Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:50.599291 env[1218]: time="2025-07-11T00:35:50.599177004Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:50.599380 env[1218]: time="2025-07-11T00:35:50.599321448Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b pid=4425 runtime=io.containerd.runc.v2 Jul 11 00:35:50.609592 systemd[1]: Started cri-containerd-4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b.scope. Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.627000 audit: BPF prog-id=207 op=LOAD Jul 11 00:35:50.628000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.628000 audit[4435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4425 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393863646236383534623331616164313765643863356461386365 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4425 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393863646236383534623331616164313765643863356461386365 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.629000 audit: BPF prog-id=208 op=LOAD Jul 11 00:35:50.629000 audit[4435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4425 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393863646236383534623331616164313765643863356461386365 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.630000 audit: BPF prog-id=209 op=LOAD Jul 11 00:35:50.630000 audit[4435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4425 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393863646236383534623331616164313765643863356461386365 Jul 11 00:35:50.632000 audit: BPF prog-id=209 op=UNLOAD Jul 11 00:35:50.632000 audit: BPF prog-id=208 op=UNLOAD Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.632000 audit: BPF prog-id=210 op=LOAD Jul 11 00:35:50.632000 audit[4435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4425 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435393863646236383534623331616164313765643863356461386365 Jul 11 00:35:50.634157 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:50.652918 systemd-networkd[1047]: calia7a29fbd44d: Link UP Jul 11 00:35:50.654591 systemd-networkd[1047]: calia7a29fbd44d: Gained carrier Jul 11 00:35:50.655072 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia7a29fbd44d: link becomes ready Jul 11 00:35:50.666231 env[1218]: time="2025-07-11T00:35:50.666176197Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kk29p,Uid:02d1f398-f1df-4170-9c80-449337ac7fcc,Namespace:kube-system,Attempt:1,} returns sandbox id \"4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b\"" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.431 [INFO][4327] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--84db954f75--ll295-eth0 calico-apiserver-84db954f75- calico-apiserver c726969c-6763-4115-bad6-191a2dd3a838 999 0 2025-07-11 00:35:21 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84db954f75 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-84db954f75-ll295 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia7a29fbd44d [] [] }} ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.435 [INFO][4327] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.535 [INFO][4388] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" HandleID="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.535 [INFO][4388] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" HandleID="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000323490), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-84db954f75-ll295", "timestamp":"2025-07-11 00:35:50.535418462 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.535 [INFO][4388] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.561 [INFO][4388] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.561 [INFO][4388] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.620 [INFO][4388] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.625 [INFO][4388] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.631 [INFO][4388] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.633 [INFO][4388] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.635 [INFO][4388] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.636 [INFO][4388] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.637 [INFO][4388] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.641 [INFO][4388] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.647 [INFO][4388] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.647 [INFO][4388] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" host="localhost" Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.647 [INFO][4388] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:35:50.666892 env[1218]: 2025-07-11 00:35:50.647 [INFO][4388] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" HandleID="k8s-pod-network.e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.667532 env[1218]: 2025-07-11 00:35:50.650 [INFO][4327] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--ll295-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"c726969c-6763-4115-bad6-191a2dd3a838", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-84db954f75-ll295", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7a29fbd44d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:50.667532 env[1218]: 2025-07-11 00:35:50.650 [INFO][4327] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.667532 env[1218]: 2025-07-11 00:35:50.650 [INFO][4327] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia7a29fbd44d ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.667532 env[1218]: 2025-07-11 00:35:50.655 [INFO][4327] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.667532 env[1218]: 2025-07-11 00:35:50.655 [INFO][4327] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--ll295-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"c726969c-6763-4115-bad6-191a2dd3a838", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d", Pod:"calico-apiserver-84db954f75-ll295", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7a29fbd44d", MAC:"7a:fd:bd:d1:94:30", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:35:50.667532 env[1218]: 2025-07-11 00:35:50.662 [INFO][4327] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d" Namespace="calico-apiserver" Pod="calico-apiserver-84db954f75-ll295" WorkloadEndpoint="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:35:50.668326 kubelet[1950]: E0711 00:35:50.668122 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:50.672669 env[1218]: time="2025-07-11T00:35:50.672628177Z" level=info msg="CreateContainer within sandbox \"4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:35:50.676000 audit[4470]: NETFILTER_CFG table=filter:118 family=2 entries=57 op=nft_register_chain pid=4470 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:35:50.676000 audit[4470]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27812 a0=3 a1=ffffdbded660 a2=0 a3=ffffa6ff9fa8 items=0 ppid=3300 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.676000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:35:50.681022 env[1218]: time="2025-07-11T00:35:50.680905729Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:35:50.681098 env[1218]: time="2025-07-11T00:35:50.681044213Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:35:50.681098 env[1218]: time="2025-07-11T00:35:50.681082294Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:35:50.681561 env[1218]: time="2025-07-11T00:35:50.681509226Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d pid=4478 runtime=io.containerd.runc.v2 Jul 11 00:35:50.692546 env[1218]: time="2025-07-11T00:35:50.692495053Z" level=info msg="CreateContainer within sandbox \"4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"2febe1662f99442bdc4bd76b5843cff370e81cd834b1d66e44df72306410f518\"" Jul 11 00:35:50.693042 env[1218]: time="2025-07-11T00:35:50.693012187Z" level=info msg="StartContainer for \"2febe1662f99442bdc4bd76b5843cff370e81cd834b1d66e44df72306410f518\"" Jul 11 00:35:50.700743 systemd[1]: Started cri-containerd-e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d.scope. Jul 11 00:35:50.712610 systemd[1]: Started cri-containerd-2febe1662f99442bdc4bd76b5843cff370e81cd834b1d66e44df72306410f518.scope. Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit: BPF prog-id=211 op=LOAD Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4478 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534363262313230613166353434326566306261653866633366666562 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4478 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534363262313230613166353434326566306261653866633366666562 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.720000 audit: BPF prog-id=212 op=LOAD Jul 11 00:35:50.720000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4478 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534363262313230613166353434326566306261653866633366666562 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit: BPF prog-id=213 op=LOAD Jul 11 00:35:50.721000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4478 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534363262313230613166353434326566306261653866633366666562 Jul 11 00:35:50.721000 audit: BPF prog-id=213 op=UNLOAD Jul 11 00:35:50.721000 audit: BPF prog-id=212 op=UNLOAD Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.721000 audit: BPF prog-id=214 op=LOAD Jul 11 00:35:50.721000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4478 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534363262313230613166353434326566306261653866633366666562 Jul 11 00:35:50.727154 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit: BPF prog-id=215 op=LOAD Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4425 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656265313636326639393434326264633462643736623538343363 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4425 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656265313636326639393434326264633462643736623538343363 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit: BPF prog-id=216 op=LOAD Jul 11 00:35:50.729000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4425 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656265313636326639393434326264633462643736623538343363 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit: BPF prog-id=217 op=LOAD Jul 11 00:35:50.729000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4425 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656265313636326639393434326264633462643736623538343363 Jul 11 00:35:50.729000 audit: BPF prog-id=217 op=UNLOAD Jul 11 00:35:50.729000 audit: BPF prog-id=216 op=UNLOAD Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:50.729000 audit: BPF prog-id=218 op=LOAD Jul 11 00:35:50.729000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4425 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:50.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656265313636326639393434326264633462643736623538343363 Jul 11 00:35:50.745950 env[1218]: time="2025-07-11T00:35:50.745914466Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84db954f75-ll295,Uid:c726969c-6763-4115-bad6-191a2dd3a838,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d\"" Jul 11 00:35:50.747737 env[1218]: time="2025-07-11T00:35:50.747654035Z" level=info msg="StartContainer for \"2febe1662f99442bdc4bd76b5843cff370e81cd834b1d66e44df72306410f518\" returns successfully" Jul 11 00:35:50.757000 audit[4524]: AVC avc: denied { getattr } for pid=4524 comm="coredns" path="cgroup:[4026532537]" dev="nsfs" ino=4026532537 scontext=system_u:system_r:svirt_lxc_net_t:s0:c78,c437 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:35:50.757000 audit[4524]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400015cc30 a2=400015e578 a3=0 items=0 ppid=4425 pid=4524 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c78,c437 key=(null) Jul 11 00:35:50.757000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:35:50.896948 systemd-networkd[1047]: cali9a57fe8eb55: Gained IPv6LL Jul 11 00:35:51.280915 systemd-networkd[1047]: cali2239f528d49: Gained IPv6LL Jul 11 00:35:51.438841 kubelet[1950]: E0711 00:35:51.438805 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:51.440620 kubelet[1950]: E0711 00:35:51.440577 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:51.462000 audit[4561]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4561 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:51.467275 kubelet[1950]: I0711 00:35:51.467201 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-kk29p" podStartSLOduration=40.46718521 podStartE2EDuration="40.46718521s" podCreationTimestamp="2025-07-11 00:35:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:35:51.452275401 +0000 UTC m=+48.312844029" watchObservedRunningTime="2025-07-11 00:35:51.46718521 +0000 UTC m=+48.327753838" Jul 11 00:35:51.462000 audit[4561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc83c4590 a2=0 a3=1 items=0 ppid=2063 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:51.462000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:51.470000 audit[4561]: NETFILTER_CFG table=nat:120 family=2 entries=46 op=nft_register_rule pid=4561 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:51.470000 audit[4561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffc83c4590 a2=0 a3=1 items=0 ppid=2063 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:51.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:51.728922 systemd-networkd[1047]: calia7a29fbd44d: Gained IPv6LL Jul 11 00:35:51.928835 env[1218]: time="2025-07-11T00:35:51.928782737Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:51.930406 env[1218]: time="2025-07-11T00:35:51.930367540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:51.932034 env[1218]: time="2025-07-11T00:35:51.932007545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:51.933131 env[1218]: time="2025-07-11T00:35:51.933096415Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:51.933817 env[1218]: time="2025-07-11T00:35:51.933773513Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 11 00:35:51.934755 env[1218]: time="2025-07-11T00:35:51.934731100Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 11 00:35:51.938018 env[1218]: time="2025-07-11T00:35:51.937975028Z" level=info msg="CreateContainer within sandbox \"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 11 00:35:51.951215 env[1218]: time="2025-07-11T00:35:51.951166710Z" level=info msg="CreateContainer within sandbox \"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"950017c5e949fae4ebebba556f36e4278cad8f15823cd9dcfab3476c23f34ea4\"" Jul 11 00:35:51.951605 env[1218]: time="2025-07-11T00:35:51.951571361Z" level=info msg="StartContainer for \"950017c5e949fae4ebebba556f36e4278cad8f15823cd9dcfab3476c23f34ea4\"" Jul 11 00:35:51.982859 systemd[1]: Started cri-containerd-950017c5e949fae4ebebba556f36e4278cad8f15823cd9dcfab3476c23f34ea4.scope. Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3717 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303031376335653934396661653465626562626135353666333665 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit: BPF prog-id=219 op=LOAD Jul 11 00:35:52.002000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3717 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303031376335653934396661653465626562626135353666333665 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit: BPF prog-id=220 op=LOAD Jul 11 00:35:52.002000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3717 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303031376335653934396661653465626562626135353666333665 Jul 11 00:35:52.002000 audit: BPF prog-id=220 op=UNLOAD Jul 11 00:35:52.002000 audit: BPF prog-id=219 op=UNLOAD Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:52.002000 audit: BPF prog-id=221 op=LOAD Jul 11 00:35:52.002000 audit[4580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3717 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935303031376335653934396661653465626562626135353666333665 Jul 11 00:35:52.021278 env[1218]: time="2025-07-11T00:35:52.019691458Z" level=info msg="StartContainer for \"950017c5e949fae4ebebba556f36e4278cad8f15823cd9dcfab3476c23f34ea4\" returns successfully" Jul 11 00:35:52.335345 kubelet[1950]: I0711 00:35:52.335317 1950 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 11 00:35:52.336860 kubelet[1950]: I0711 00:35:52.336840 1950 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 11 00:35:52.368930 systemd-networkd[1047]: calicbb97ded65b: Gained IPv6LL Jul 11 00:35:52.445332 kubelet[1950]: E0711 00:35:52.445298 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:52.445716 kubelet[1950]: E0711 00:35:52.445299 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:52.467448 kubelet[1950]: I0711 00:35:52.467073 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-f6xhd" podStartSLOduration=21.042929479 podStartE2EDuration="26.467055641s" podCreationTimestamp="2025-07-11 00:35:26 +0000 UTC" firstStartedPulling="2025-07-11 00:35:46.510458454 +0000 UTC m=+43.371027082" lastFinishedPulling="2025-07-11 00:35:51.934584616 +0000 UTC m=+48.795153244" observedRunningTime="2025-07-11 00:35:52.464588015 +0000 UTC m=+49.325156643" watchObservedRunningTime="2025-07-11 00:35:52.467055641 +0000 UTC m=+49.327624269" Jul 11 00:35:52.490000 audit[4636]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=4636 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:52.490000 audit[4636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd4eb55b0 a2=0 a3=1 items=0 ppid=2063 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:52.490000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:52.500000 audit[4636]: NETFILTER_CFG table=nat:122 family=2 entries=58 op=nft_register_chain pid=4636 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:52.500000 audit[4636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd4eb55b0 a2=0 a3=1 items=0 ppid=2063 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:52.500000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:53.059848 systemd[1]: Started sshd@7-10.0.0.93:22-10.0.0.1:35744.service. Jul 11 00:35:53.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.93:22-10.0.0.1:35744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:53.110000 audit[4647]: USER_ACCT pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:53.111741 sshd[4647]: Accepted publickey for core from 10.0.0.1 port 35744 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:35:53.111000 audit[4647]: CRED_ACQ pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:53.111000 audit[4647]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb60bc20 a2=3 a3=1 items=0 ppid=1 pid=4647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:53.111000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:35:53.113240 sshd[4647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:35:53.118635 systemd[1]: Started session-8.scope. Jul 11 00:35:53.119246 systemd-logind[1205]: New session 8 of user core. Jul 11 00:35:53.124000 audit[4647]: USER_START pid=4647 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:53.126000 audit[4649]: CRED_ACQ pid=4649 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:53.307897 sshd[4647]: pam_unix(sshd:session): session closed for user core Jul 11 00:35:53.309000 audit[4647]: USER_END pid=4647 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:53.310000 audit[4647]: CRED_DISP pid=4647 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:53.313247 systemd[1]: sshd@7-10.0.0.93:22-10.0.0.1:35744.service: Deactivated successfully. Jul 11 00:35:53.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.93:22-10.0.0.1:35744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:53.314043 systemd[1]: session-8.scope: Deactivated successfully. Jul 11 00:35:53.314944 systemd-logind[1205]: Session 8 logged out. Waiting for processes to exit. Jul 11 00:35:53.315594 systemd-logind[1205]: Removed session 8. Jul 11 00:35:53.455760 kubelet[1950]: E0711 00:35:53.455726 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:35:54.364060 env[1218]: time="2025-07-11T00:35:54.364011391Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:54.365972 env[1218]: time="2025-07-11T00:35:54.365938121Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:54.367720 env[1218]: time="2025-07-11T00:35:54.367682006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:54.369986 env[1218]: time="2025-07-11T00:35:54.369213126Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:54.370400 env[1218]: time="2025-07-11T00:35:54.370368396Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 11 00:35:54.371770 env[1218]: time="2025-07-11T00:35:54.371736671Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 11 00:35:54.374916 env[1218]: time="2025-07-11T00:35:54.374874633Z" level=info msg="CreateContainer within sandbox \"6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:35:54.391060 env[1218]: time="2025-07-11T00:35:54.388880396Z" level=info msg="CreateContainer within sandbox \"6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c469a898a2982337a61ac1985200fd2f1116161138e6391ff539f59972a95ffd\"" Jul 11 00:35:54.391060 env[1218]: time="2025-07-11T00:35:54.389476571Z" level=info msg="StartContainer for \"c469a898a2982337a61ac1985200fd2f1116161138e6391ff539f59972a95ffd\"" Jul 11 00:35:54.410505 systemd[1]: Started cri-containerd-c469a898a2982337a61ac1985200fd2f1116161138e6391ff539f59972a95ffd.scope. Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.433321 kernel: kauditd_printk_skb: 545 callbacks suppressed Jul 11 00:35:54.433415 kernel: audit: type=1400 audit(1752194154.429:1307): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.433444 kernel: audit: type=1400 audit(1752194154.429:1308): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.438632 kernel: audit: type=1400 audit(1752194154.429:1309): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.441455 kernel: audit: type=1400 audit(1752194154.429:1310): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.441523 kernel: audit: type=1400 audit(1752194154.429:1311): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.448310 kernel: audit: type=1400 audit(1752194154.429:1312): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.448397 kernel: audit: type=1400 audit(1752194154.429:1313): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.453413 kernel: audit: type=1400 audit(1752194154.429:1314): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.453467 kernel: audit: type=1400 audit(1752194154.429:1315): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.458982 kernel: audit: type=1400 audit(1752194154.429:1316): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.429000 audit: BPF prog-id=222 op=LOAD Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3961 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:54.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334363961383938613239383233333761363161633139383532303066 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3961 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:54.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334363961383938613239383233333761363161633139383532303066 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.435000 audit: BPF prog-id=223 op=LOAD Jul 11 00:35:54.435000 audit[4670]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3961 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:54.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334363961383938613239383233333761363161633139383532303066 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit: BPF prog-id=224 op=LOAD Jul 11 00:35:54.437000 audit[4670]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3961 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:54.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334363961383938613239383233333761363161633139383532303066 Jul 11 00:35:54.437000 audit: BPF prog-id=224 op=UNLOAD Jul 11 00:35:54.437000 audit: BPF prog-id=223 op=UNLOAD Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { perfmon } for pid=4670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit[4670]: AVC avc: denied { bpf } for pid=4670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:54.437000 audit: BPF prog-id=225 op=LOAD Jul 11 00:35:54.437000 audit[4670]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3961 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:54.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334363961383938613239383233333761363161633139383532303066 Jul 11 00:35:54.485210 env[1218]: time="2025-07-11T00:35:54.485162732Z" level=info msg="StartContainer for \"c469a898a2982337a61ac1985200fd2f1116161138e6391ff539f59972a95ffd\" returns successfully" Jul 11 00:35:55.477000 audit[4681]: AVC avc: denied { watch } for pid=4681 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_35_34.606638284/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c406,c586 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c406,c586 tclass=file permissive=0 Jul 11 00:35:55.477000 audit[4681]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400120aac0 a2=fc6 a3=0 items=0 ppid=3961 pid=4681 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c406,c586 key=(null) Jul 11 00:35:55.477000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:35:55.478465 kubelet[1950]: I0711 00:35:55.478178 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-84db954f75-q2wgx" podStartSLOduration=28.665485678 podStartE2EDuration="34.478162474s" podCreationTimestamp="2025-07-11 00:35:21 +0000 UTC" firstStartedPulling="2025-07-11 00:35:48.558939992 +0000 UTC m=+45.419508580" lastFinishedPulling="2025-07-11 00:35:54.371616748 +0000 UTC m=+51.232185376" observedRunningTime="2025-07-11 00:35:55.476635515 +0000 UTC m=+52.337204143" watchObservedRunningTime="2025-07-11 00:35:55.478162474 +0000 UTC m=+52.338731102" Jul 11 00:35:55.490000 audit[4706]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=4706 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:55.490000 audit[4706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd2eb1080 a2=0 a3=1 items=0 ppid=2063 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:55.490000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:55.496000 audit[4706]: NETFILTER_CFG table=nat:124 family=2 entries=22 op=nft_register_rule pid=4706 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:55.496000 audit[4706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd2eb1080 a2=0 a3=1 items=0 ppid=2063 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:55.496000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:55.512000 audit[4708]: NETFILTER_CFG table=filter:125 family=2 entries=11 op=nft_register_rule pid=4708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:55.512000 audit[4708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd73e4180 a2=0 a3=1 items=0 ppid=2063 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:55.512000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:55.521000 audit[4708]: NETFILTER_CFG table=nat:126 family=2 entries=29 op=nft_register_chain pid=4708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:55.521000 audit[4708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd73e4180 a2=0 a3=1 items=0 ppid=2063 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:55.521000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:56.757420 env[1218]: time="2025-07-11T00:35:56.757342787Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.761330 env[1218]: time="2025-07-11T00:35:56.761292086Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.762565 env[1218]: time="2025-07-11T00:35:56.762538717Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.763929 env[1218]: time="2025-07-11T00:35:56.763899231Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.764578 env[1218]: time="2025-07-11T00:35:56.764550607Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 11 00:35:56.765772 env[1218]: time="2025-07-11T00:35:56.765746717Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 11 00:35:56.782542 env[1218]: time="2025-07-11T00:35:56.782495378Z" level=info msg="CreateContainer within sandbox \"09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 11 00:35:56.797382 env[1218]: time="2025-07-11T00:35:56.797331550Z" level=info msg="CreateContainer within sandbox \"09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"098e5e65f570bbd17b3fb3800a3122b2a5f3dacdf283b9326d2682fdd99d66cb\"" Jul 11 00:35:56.797993 env[1218]: time="2025-07-11T00:35:56.797961126Z" level=info msg="StartContainer for \"098e5e65f570bbd17b3fb3800a3122b2a5f3dacdf283b9326d2682fdd99d66cb\"" Jul 11 00:35:56.820645 systemd[1]: Started cri-containerd-098e5e65f570bbd17b3fb3800a3122b2a5f3dacdf283b9326d2682fdd99d66cb.scope. Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.851000 audit: BPF prog-id=226 op=LOAD Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4114 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:56.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039386535653635663537306262643137623366623338303061333132 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4114 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:56.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039386535653635663537306262643137623366623338303061333132 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit: BPF prog-id=227 op=LOAD Jul 11 00:35:56.852000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4114 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:56.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039386535653635663537306262643137623366623338303061333132 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit: BPF prog-id=228 op=LOAD Jul 11 00:35:56.852000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4114 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:56.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039386535653635663537306262643137623366623338303061333132 Jul 11 00:35:56.852000 audit: BPF prog-id=228 op=UNLOAD Jul 11 00:35:56.852000 audit: BPF prog-id=227 op=UNLOAD Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { perfmon } for pid=4721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit[4721]: AVC avc: denied { bpf } for pid=4721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:56.852000 audit: BPF prog-id=229 op=LOAD Jul 11 00:35:56.852000 audit[4721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4114 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:56.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039386535653635663537306262643137623366623338303061333132 Jul 11 00:35:56.869367 env[1218]: time="2025-07-11T00:35:56.869324237Z" level=info msg="StartContainer for \"098e5e65f570bbd17b3fb3800a3122b2a5f3dacdf283b9326d2682fdd99d66cb\" returns successfully" Jul 11 00:35:56.992915 env[1218]: time="2025-07-11T00:35:56.992863057Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.994207 env[1218]: time="2025-07-11T00:35:56.994168090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.996027 env[1218]: time="2025-07-11T00:35:56.996001256Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.997394 env[1218]: time="2025-07-11T00:35:56.997368010Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:35:56.997884 env[1218]: time="2025-07-11T00:35:56.997853102Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 11 00:35:57.001660 env[1218]: time="2025-07-11T00:35:57.001621717Z" level=info msg="CreateContainer within sandbox \"e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:35:57.011192 env[1218]: time="2025-07-11T00:35:57.011084150Z" level=info msg="CreateContainer within sandbox \"e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"950b8fc949aecdb5a7c314f2c9db1e9caf832b2d8006b99340b96826752736e8\"" Jul 11 00:35:57.012324 env[1218]: time="2025-07-11T00:35:57.012296700Z" level=info msg="StartContainer for \"950b8fc949aecdb5a7c314f2c9db1e9caf832b2d8006b99340b96826752736e8\"" Jul 11 00:35:57.036750 systemd[1]: Started cri-containerd-950b8fc949aecdb5a7c314f2c9db1e9caf832b2d8006b99340b96826752736e8.scope. Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.054000 audit: BPF prog-id=230 op=LOAD Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4478 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935306238666339343961656364623561376333313466326339646231 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4478 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935306238666339343961656364623561376333313466326339646231 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit: BPF prog-id=231 op=LOAD Jul 11 00:35:57.055000 audit[4767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4478 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935306238666339343961656364623561376333313466326339646231 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit: BPF prog-id=232 op=LOAD Jul 11 00:35:57.055000 audit[4767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4478 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935306238666339343961656364623561376333313466326339646231 Jul 11 00:35:57.055000 audit: BPF prog-id=232 op=UNLOAD Jul 11 00:35:57.055000 audit: BPF prog-id=231 op=UNLOAD Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { perfmon } for pid=4767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit[4767]: AVC avc: denied { bpf } for pid=4767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:35:57.055000 audit: BPF prog-id=233 op=LOAD Jul 11 00:35:57.055000 audit[4767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4478 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935306238666339343961656364623561376333313466326339646231 Jul 11 00:35:57.074139 env[1218]: time="2025-07-11T00:35:57.074092668Z" level=info msg="StartContainer for \"950b8fc949aecdb5a7c314f2c9db1e9caf832b2d8006b99340b96826752736e8\" returns successfully" Jul 11 00:35:57.494521 kubelet[1950]: I0711 00:35:57.494447 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7756745fd8-mrw8v" podStartSLOduration=24.36600004 podStartE2EDuration="31.494431258s" podCreationTimestamp="2025-07-11 00:35:26 +0000 UTC" firstStartedPulling="2025-07-11 00:35:49.637116094 +0000 UTC m=+46.497684722" lastFinishedPulling="2025-07-11 00:35:56.765547312 +0000 UTC m=+53.626115940" observedRunningTime="2025-07-11 00:35:57.494359936 +0000 UTC m=+54.354928564" watchObservedRunningTime="2025-07-11 00:35:57.494431258 +0000 UTC m=+54.354999846" Jul 11 00:35:57.494955 kubelet[1950]: I0711 00:35:57.494921 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-84db954f75-ll295" podStartSLOduration=30.247730529 podStartE2EDuration="36.49491427s" podCreationTimestamp="2025-07-11 00:35:21 +0000 UTC" firstStartedPulling="2025-07-11 00:35:50.751475302 +0000 UTC m=+47.612043930" lastFinishedPulling="2025-07-11 00:35:56.998659043 +0000 UTC m=+53.859227671" observedRunningTime="2025-07-11 00:35:57.483766714 +0000 UTC m=+54.344335342" watchObservedRunningTime="2025-07-11 00:35:57.49491427 +0000 UTC m=+54.355482898" Jul 11 00:35:57.502000 audit[4810]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=4810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:57.502000 audit[4810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffcec57970 a2=0 a3=1 items=0 ppid=2063 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.502000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:57.508000 audit[4810]: NETFILTER_CFG table=nat:128 family=2 entries=32 op=nft_register_rule pid=4810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:35:57.508000 audit[4810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffcec57970 a2=0 a3=1 items=0 ppid=2063 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:57.508000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:35:58.312238 systemd[1]: Started sshd@8-10.0.0.93:22-10.0.0.1:35760.service. Jul 11 00:35:58.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.93:22-10.0.0.1:35760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:58.356911 sshd[4823]: Accepted publickey for core from 10.0.0.1 port 35760 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:35:58.355000 audit[4823]: USER_ACCT pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:58.356000 audit[4823]: CRED_ACQ pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:58.356000 audit[4823]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8c76040 a2=3 a3=1 items=0 ppid=1 pid=4823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:35:58.356000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:35:58.358595 sshd[4823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:35:58.363020 systemd-logind[1205]: New session 9 of user core. Jul 11 00:35:58.363437 systemd[1]: Started session-9.scope. Jul 11 00:35:58.366000 audit[4823]: USER_START pid=4823 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:58.367000 audit[4825]: CRED_ACQ pid=4825 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:58.475218 kubelet[1950]: I0711 00:35:58.475178 1950 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:35:58.612408 sshd[4823]: pam_unix(sshd:session): session closed for user core Jul 11 00:35:58.612000 audit[4823]: USER_END pid=4823 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:58.612000 audit[4823]: CRED_DISP pid=4823 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:35:58.616499 systemd-logind[1205]: Session 9 logged out. Waiting for processes to exit. Jul 11 00:35:58.616657 systemd[1]: sshd@8-10.0.0.93:22-10.0.0.1:35760.service: Deactivated successfully. Jul 11 00:35:58.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.93:22-10.0.0.1:35760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:35:58.617460 systemd[1]: session-9.scope: Deactivated successfully. Jul 11 00:35:58.618252 systemd-logind[1205]: Removed session 9. Jul 11 00:35:58.868000 audit[4778]: AVC avc: denied { watch } for pid=4778 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_35_34.2844453452/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c663,c1003 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c663,c1003 tclass=file permissive=0 Jul 11 00:35:58.868000 audit[4778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007b3b00 a2=fc6 a3=0 items=0 ppid=4478 pid=4778 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c663,c1003 key=(null) Jul 11 00:35:58.868000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:36:00.828000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.831493 kernel: kauditd_printk_skb: 196 callbacks suppressed Jul 11 00:36:00.831566 kernel: audit: type=1400 audit(1752194160.828:1378): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.828000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.837310 kernel: audit: type=1400 audit(1752194160.828:1379): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.837371 kernel: audit: type=1300 audit(1752194160.828:1378): arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=40066fff00 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.828000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=40066fff00 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.828000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=4004ed0660 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.844746 kernel: audit: type=1300 audit(1752194160.828:1379): arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=4004ed0660 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.828000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.847929 kernel: audit: type=1327 audit(1752194160.828:1378): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.847979 kernel: audit: type=1327 audit(1752194160.828:1379): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.828000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.828000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.853850 kernel: audit: type=1400 audit(1752194160.828:1380): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.853894 kernel: audit: type=1300 audit(1752194160.828:1380): arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=40126bda70 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.828000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=40126bda70 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.828000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.860593 kernel: audit: type=1327 audit(1752194160.828:1380): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.860644 kernel: audit: type=1400 audit(1752194160.840:1381): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.840000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.840000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=4004ed07e0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.840000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.920000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.920000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=400adefd70 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:00.920000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:00.920000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=40098431c0 a2=fc6 a3=0 items=0 ppid=1668 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c525 key=(null) Jul 11 00:36:00.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 11 00:36:01.449000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:01.449000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:01.449000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40032643a0 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:36:01.449000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:36:01.449000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40022ede60 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:36:01.449000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:36:03.228385 env[1218]: time="2025-07-11T00:36:03.228038475Z" level=info msg="StopPodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\"" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.273 [WARNING][4857] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0", GenerateName:"calico-kube-controllers-7756745fd8-", Namespace:"calico-system", SelfLink:"", UID:"0f516b6c-22b6-437e-9f66-5a9deab18e77", ResourceVersion:"1143", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7756745fd8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1", Pod:"calico-kube-controllers-7756745fd8-mrw8v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9a57fe8eb55", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.273 [INFO][4857] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.273 [INFO][4857] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" iface="eth0" netns="" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.273 [INFO][4857] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.273 [INFO][4857] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.299 [INFO][4868] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.299 [INFO][4868] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.299 [INFO][4868] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.308 [WARNING][4868] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.308 [INFO][4868] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.309 [INFO][4868] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.313363 env[1218]: 2025-07-11 00:36:03.311 [INFO][4857] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.313898 env[1218]: time="2025-07-11T00:36:03.313863000Z" level=info msg="TearDown network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" successfully" Jul 11 00:36:03.313976 env[1218]: time="2025-07-11T00:36:03.313957842Z" level=info msg="StopPodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" returns successfully" Jul 11 00:36:03.314728 env[1218]: time="2025-07-11T00:36:03.314686659Z" level=info msg="RemovePodSandbox for \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\"" Jul 11 00:36:03.314803 env[1218]: time="2025-07-11T00:36:03.314727740Z" level=info msg="Forcibly stopping sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\"" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.349 [WARNING][4886] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0", GenerateName:"calico-kube-controllers-7756745fd8-", Namespace:"calico-system", SelfLink:"", UID:"0f516b6c-22b6-437e-9f66-5a9deab18e77", ResourceVersion:"1143", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7756745fd8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09c9c7a7c6ef7c5b5c9b0c9853f20d3356b5fe04c11472e29a6de4b172dac3d1", Pod:"calico-kube-controllers-7756745fd8-mrw8v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9a57fe8eb55", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.350 [INFO][4886] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.350 [INFO][4886] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" iface="eth0" netns="" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.350 [INFO][4886] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.351 [INFO][4886] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.372 [INFO][4894] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.372 [INFO][4894] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.372 [INFO][4894] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.381 [WARNING][4894] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.381 [INFO][4894] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" HandleID="k8s-pod-network.4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Workload="localhost-k8s-calico--kube--controllers--7756745fd8--mrw8v-eth0" Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.386 [INFO][4894] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.389767 env[1218]: 2025-07-11 00:36:03.388 [INFO][4886] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac" Jul 11 00:36:03.390430 env[1218]: time="2025-07-11T00:36:03.389809619Z" level=info msg="TearDown network for sandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" successfully" Jul 11 00:36:03.393592 env[1218]: time="2025-07-11T00:36:03.393556825Z" level=info msg="RemovePodSandbox \"4f6e2812286b52000efe1e1c31004e21cde7633e5a4e107cfc1f79b00c6836ac\" returns successfully" Jul 11 00:36:03.394163 env[1218]: time="2025-07-11T00:36:03.394137838Z" level=info msg="StopPodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\"" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.431 [WARNING][4912] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" WorkloadEndpoint="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.431 [INFO][4912] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.431 [INFO][4912] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" iface="eth0" netns="" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.431 [INFO][4912] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.431 [INFO][4912] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.448 [INFO][4920] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.449 [INFO][4920] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.449 [INFO][4920] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.457 [WARNING][4920] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.457 [INFO][4920] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.458 [INFO][4920] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.461849 env[1218]: 2025-07-11 00:36:03.460 [INFO][4912] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.462239 env[1218]: time="2025-07-11T00:36:03.461900310Z" level=info msg="TearDown network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" successfully" Jul 11 00:36:03.462239 env[1218]: time="2025-07-11T00:36:03.461930751Z" level=info msg="StopPodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" returns successfully" Jul 11 00:36:03.462497 env[1218]: time="2025-07-11T00:36:03.462470923Z" level=info msg="RemovePodSandbox for \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\"" Jul 11 00:36:03.462603 env[1218]: time="2025-07-11T00:36:03.462568365Z" level=info msg="Forcibly stopping sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\"" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.506 [WARNING][4936] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" WorkloadEndpoint="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.506 [INFO][4936] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.506 [INFO][4936] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" iface="eth0" netns="" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.506 [INFO][4936] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.506 [INFO][4936] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.524 [INFO][4945] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.524 [INFO][4945] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.524 [INFO][4945] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.533 [WARNING][4945] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.533 [INFO][4945] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" HandleID="k8s-pod-network.db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Workload="localhost-k8s-whisker--76fd47b65--xwdhm-eth0" Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.534 [INFO][4945] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.538061 env[1218]: 2025-07-11 00:36:03.536 [INFO][4936] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65" Jul 11 00:36:03.538677 env[1218]: time="2025-07-11T00:36:03.538341940Z" level=info msg="TearDown network for sandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" successfully" Jul 11 00:36:03.541624 env[1218]: time="2025-07-11T00:36:03.541593095Z" level=info msg="RemovePodSandbox \"db9401229c423a3eb409a3ca036a9fe2619c71f584a1080d40c481d050fecd65\" returns successfully" Jul 11 00:36:03.542240 env[1218]: time="2025-07-11T00:36:03.542211549Z" level=info msg="StopPodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\"" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.574 [WARNING][4964] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kk29p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"02d1f398-f1df-4170-9c80-449337ac7fcc", ResourceVersion:"1034", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b", Pod:"coredns-674b8bbfcf-kk29p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbb97ded65b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.575 [INFO][4964] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.575 [INFO][4964] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" iface="eth0" netns="" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.575 [INFO][4964] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.575 [INFO][4964] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.594 [INFO][4974] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.594 [INFO][4974] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.594 [INFO][4974] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.603 [WARNING][4974] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.603 [INFO][4974] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.604 [INFO][4974] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.607827 env[1218]: 2025-07-11 00:36:03.606 [INFO][4964] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.608336 env[1218]: time="2025-07-11T00:36:03.607861732Z" level=info msg="TearDown network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" successfully" Jul 11 00:36:03.608336 env[1218]: time="2025-07-11T00:36:03.607895413Z" level=info msg="StopPodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" returns successfully" Jul 11 00:36:03.608865 env[1218]: time="2025-07-11T00:36:03.608838514Z" level=info msg="RemovePodSandbox for \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\"" Jul 11 00:36:03.608923 env[1218]: time="2025-07-11T00:36:03.608874675Z" level=info msg="Forcibly stopping sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\"" Jul 11 00:36:03.617264 systemd[1]: Started sshd@9-10.0.0.93:22-10.0.0.1:41384.service. Jul 11 00:36:03.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.93:22-10.0.0.1:41384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:03.660000 audit[4998]: USER_ACCT pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.662222 sshd[4998]: Accepted publickey for core from 10.0.0.1 port 41384 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:03.661000 audit[4998]: CRED_ACQ pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.661000 audit[4998]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1b1af10 a2=3 a3=1 items=0 ppid=1 pid=4998 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:03.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:03.663527 sshd[4998]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:03.667483 systemd-logind[1205]: New session 10 of user core. Jul 11 00:36:03.668202 systemd[1]: Started session-10.scope. Jul 11 00:36:03.670000 audit[4998]: USER_START pid=4998 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.671000 audit[5010]: CRED_ACQ pid=5010 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.650 [WARNING][4992] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--kk29p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"02d1f398-f1df-4170-9c80-449337ac7fcc", ResourceVersion:"1034", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4598cdb6854b31aad17ed8c5da8ceddf00c3516dd2cf0812127f65b0efcceb2b", Pod:"coredns-674b8bbfcf-kk29p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbb97ded65b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.650 [INFO][4992] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.650 [INFO][4992] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" iface="eth0" netns="" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.651 [INFO][4992] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.651 [INFO][4992] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.674 [INFO][5004] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.674 [INFO][5004] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.674 [INFO][5004] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.683 [WARNING][5004] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.683 [INFO][5004] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" HandleID="k8s-pod-network.dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Workload="localhost-k8s-coredns--674b8bbfcf--kk29p-eth0" Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.684 [INFO][5004] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.688624 env[1218]: 2025-07-11 00:36:03.686 [INFO][4992] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5" Jul 11 00:36:03.689172 env[1218]: time="2025-07-11T00:36:03.689138113Z" level=info msg="TearDown network for sandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" successfully" Jul 11 00:36:03.692485 env[1218]: time="2025-07-11T00:36:03.692451189Z" level=info msg="RemovePodSandbox \"dad35c8c4fea406b4378bb49d1808f58e785f86ed2ff90091e23b4cc7c23ddd5\" returns successfully" Jul 11 00:36:03.693129 env[1218]: time="2025-07-11T00:36:03.693101964Z" level=info msg="StopPodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\"" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.725 [WARNING][5023] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--99f7p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"73b58247-9efa-480a-953d-bf1785d202fa", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf", Pod:"coredns-674b8bbfcf-99f7p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2239f528d49", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.725 [INFO][5023] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.725 [INFO][5023] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" iface="eth0" netns="" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.726 [INFO][5023] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.726 [INFO][5023] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.743 [INFO][5036] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.743 [INFO][5036] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.743 [INFO][5036] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.754 [WARNING][5036] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.754 [INFO][5036] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.757 [INFO][5036] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.762804 env[1218]: 2025-07-11 00:36:03.761 [INFO][5023] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.763370 env[1218]: time="2025-07-11T00:36:03.762844961Z" level=info msg="TearDown network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" successfully" Jul 11 00:36:03.763370 env[1218]: time="2025-07-11T00:36:03.762875962Z" level=info msg="StopPodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" returns successfully" Jul 11 00:36:03.763698 env[1218]: time="2025-07-11T00:36:03.763646499Z" level=info msg="RemovePodSandbox for \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\"" Jul 11 00:36:03.763893 env[1218]: time="2025-07-11T00:36:03.763814103Z" level=info msg="Forcibly stopping sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\"" Jul 11 00:36:03.855016 sshd[4998]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:03.854000 audit[4998]: USER_END pid=4998 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.854000 audit[4998]: CRED_DISP pid=4998 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.859505 systemd[1]: Started sshd@10-10.0.0.93:22-10.0.0.1:41390.service. Jul 11 00:36:03.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.93:22-10.0.0.1:41390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:03.860127 systemd[1]: sshd@9-10.0.0.93:22-10.0.0.1:41384.service: Deactivated successfully. Jul 11 00:36:03.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.93:22-10.0.0.1:41384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:03.861118 systemd[1]: session-10.scope: Deactivated successfully. Jul 11 00:36:03.863139 systemd-logind[1205]: Session 10 logged out. Waiting for processes to exit. Jul 11 00:36:03.864503 systemd-logind[1205]: Removed session 10. Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.815 [WARNING][5057] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--99f7p-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"73b58247-9efa-480a-953d-bf1785d202fa", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"46ad22aaec64c1b99b4bea34690e1f6b121eb03304c738949f9716c71ff9cbdf", Pod:"coredns-674b8bbfcf-99f7p", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2239f528d49", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.815 [INFO][5057] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.815 [INFO][5057] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" iface="eth0" netns="" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.816 [INFO][5057] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.817 [INFO][5057] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.839 [INFO][5067] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.839 [INFO][5067] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.839 [INFO][5067] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.852 [WARNING][5067] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.852 [INFO][5067] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" HandleID="k8s-pod-network.02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Workload="localhost-k8s-coredns--674b8bbfcf--99f7p-eth0" Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.853 [INFO][5067] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.867907 env[1218]: 2025-07-11 00:36:03.858 [INFO][5057] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9" Jul 11 00:36:03.868291 env[1218]: time="2025-07-11T00:36:03.867942087Z" level=info msg="TearDown network for sandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" successfully" Jul 11 00:36:03.870931 env[1218]: time="2025-07-11T00:36:03.870638149Z" level=info msg="RemovePodSandbox \"02ee41192ef7d967ce545063de10c26cc1e781effd343be76799886613516be9\" returns successfully" Jul 11 00:36:03.871205 env[1218]: time="2025-07-11T00:36:03.871162161Z" level=info msg="StopPodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\"" Jul 11 00:36:03.898000 audit[5076]: USER_ACCT pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.900107 sshd[5076]: Accepted publickey for core from 10.0.0.1 port 41390 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:03.899000 audit[5076]: CRED_ACQ pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.899000 audit[5076]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4a8c890 a2=3 a3=1 items=0 ppid=1 pid=5076 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:03.899000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:03.901719 sshd[5076]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:03.907004 systemd-logind[1205]: New session 11 of user core. Jul 11 00:36:03.907331 systemd[1]: Started session-11.scope. Jul 11 00:36:03.910000 audit[5076]: USER_START pid=5076 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.911000 audit[5103]: CRED_ACQ pid=5103 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.907 [WARNING][5089] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0", Pod:"calico-apiserver-84db954f75-q2wgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid8cedab7db0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.907 [INFO][5089] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.908 [INFO][5089] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" iface="eth0" netns="" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.908 [INFO][5089] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.908 [INFO][5089] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.926 [INFO][5098] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.927 [INFO][5098] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.927 [INFO][5098] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.935 [WARNING][5098] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.935 [INFO][5098] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.937 [INFO][5098] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:03.940517 env[1218]: 2025-07-11 00:36:03.938 [INFO][5089] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:03.940992 env[1218]: time="2025-07-11T00:36:03.940545990Z" level=info msg="TearDown network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" successfully" Jul 11 00:36:03.940992 env[1218]: time="2025-07-11T00:36:03.940578790Z" level=info msg="StopPodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" returns successfully" Jul 11 00:36:03.941503 env[1218]: time="2025-07-11T00:36:03.941447650Z" level=info msg="RemovePodSandbox for \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\"" Jul 11 00:36:03.941582 env[1218]: time="2025-07-11T00:36:03.941491491Z" level=info msg="Forcibly stopping sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\"" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:03.979 [WARNING][5117] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"34dd7a58-13a5-40bd-9bbf-2a0e954dc0d7", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6b5a707613a0bc3dcb249bd44fb40a426d9ec5dda91ffe144eda320bcae46ce0", Pod:"calico-apiserver-84db954f75-q2wgx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid8cedab7db0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:03.979 [INFO][5117] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:03.979 [INFO][5117] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" iface="eth0" netns="" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:03.979 [INFO][5117] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:03.979 [INFO][5117] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.002 [INFO][5132] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.002 [INFO][5132] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.002 [INFO][5132] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.011 [WARNING][5132] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.011 [INFO][5132] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" HandleID="k8s-pod-network.c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Workload="localhost-k8s-calico--apiserver--84db954f75--q2wgx-eth0" Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.012 [INFO][5132] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.016788 env[1218]: 2025-07-11 00:36:04.014 [INFO][5117] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb" Jul 11 00:36:04.017248 env[1218]: time="2025-07-11T00:36:04.016833533Z" level=info msg="TearDown network for sandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" successfully" Jul 11 00:36:04.019929 env[1218]: time="2025-07-11T00:36:04.019846961Z" level=info msg="RemovePodSandbox \"c1fad5610412316a5f3e123ee026d36a892a4bc54df178cb33a7370430867feb\" returns successfully" Jul 11 00:36:04.020356 env[1218]: time="2025-07-11T00:36:04.020327892Z" level=info msg="StopPodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\"" Jul 11 00:36:04.098685 sshd[5076]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:04.104182 systemd[1]: sshd@10-10.0.0.93:22-10.0.0.1:41390.service: Deactivated successfully. Jul 11 00:36:04.104950 systemd[1]: session-11.scope: Deactivated successfully. Jul 11 00:36:04.100000 audit[5076]: USER_END pid=5076 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.100000 audit[5076]: CRED_DISP pid=5076 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.93:22-10.0.0.1:41390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:04.112162 systemd[1]: Started sshd@11-10.0.0.93:22-10.0.0.1:41400.service. Jul 11 00:36:04.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.93:22-10.0.0.1:41400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:04.112940 systemd-logind[1205]: Session 11 logged out. Waiting for processes to exit. Jul 11 00:36:04.113951 systemd-logind[1205]: Removed session 11. Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.059 [WARNING][5150] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f6xhd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aa53afce-7b9d-4eee-a957-d67d4ca745f5", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b", Pod:"csi-node-driver-f6xhd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4d763442b49", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.060 [INFO][5150] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.060 [INFO][5150] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" iface="eth0" netns="" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.060 [INFO][5150] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.060 [INFO][5150] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.086 [INFO][5159] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.086 [INFO][5159] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.086 [INFO][5159] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.113 [WARNING][5159] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.113 [INFO][5159] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.120 [INFO][5159] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.126838 env[1218]: 2025-07-11 00:36:04.124 [INFO][5150] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.127347 env[1218]: time="2025-07-11T00:36:04.127307316Z" level=info msg="TearDown network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" successfully" Jul 11 00:36:04.127415 env[1218]: time="2025-07-11T00:36:04.127399758Z" level=info msg="StopPodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" returns successfully" Jul 11 00:36:04.131194 env[1218]: time="2025-07-11T00:36:04.131155043Z" level=info msg="RemovePodSandbox for \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\"" Jul 11 00:36:04.131426 env[1218]: time="2025-07-11T00:36:04.131382528Z" level=info msg="Forcibly stopping sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\"" Jul 11 00:36:04.156000 audit[5169]: USER_ACCT pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.158864 sshd[5169]: Accepted publickey for core from 10.0.0.1 port 41400 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:04.157000 audit[5169]: CRED_ACQ pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.157000 audit[5169]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc01daf0 a2=3 a3=1 items=0 ppid=1 pid=5169 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:04.157000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:04.160017 sshd[5169]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:04.163544 systemd-logind[1205]: New session 12 of user core. Jul 11 00:36:04.164364 systemd[1]: Started session-12.scope. Jul 11 00:36:04.166000 audit[5169]: USER_START pid=5169 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.167000 audit[5188]: CRED_ACQ pid=5188 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.179 [WARNING][5181] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--f6xhd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aa53afce-7b9d-4eee-a957-d67d4ca745f5", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0653dddd90d48f5c2e8957826300d1e0a18675b04cd04be61899cda4b8e6531b", Pod:"csi-node-driver-f6xhd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4d763442b49", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.179 [INFO][5181] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.179 [INFO][5181] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" iface="eth0" netns="" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.179 [INFO][5181] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.179 [INFO][5181] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.199 [INFO][5190] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.200 [INFO][5190] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.200 [INFO][5190] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.271 [WARNING][5190] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.271 [INFO][5190] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" HandleID="k8s-pod-network.335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Workload="localhost-k8s-csi--node--driver--f6xhd-eth0" Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.273 [INFO][5190] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.276692 env[1218]: 2025-07-11 00:36:04.274 [INFO][5181] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd" Jul 11 00:36:04.277465 env[1218]: time="2025-07-11T00:36:04.277420477Z" level=info msg="TearDown network for sandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" successfully" Jul 11 00:36:04.292856 sshd[5169]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:04.291000 audit[5169]: USER_END pid=5169 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.292000 audit[5169]: CRED_DISP pid=5169 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:04.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.93:22-10.0.0.1:41400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:04.295836 systemd[1]: sshd@11-10.0.0.93:22-10.0.0.1:41400.service: Deactivated successfully. Jul 11 00:36:04.296694 systemd[1]: session-12.scope: Deactivated successfully. Jul 11 00:36:04.297427 systemd-logind[1205]: Session 12 logged out. Waiting for processes to exit. Jul 11 00:36:04.298093 systemd-logind[1205]: Removed session 12. Jul 11 00:36:04.308552 env[1218]: time="2025-07-11T00:36:04.308497101Z" level=info msg="RemovePodSandbox \"335fd80a817a4629d63014631536225079432f3d1199555d4f2a3da9333e8bdd\" returns successfully" Jul 11 00:36:04.309032 env[1218]: time="2025-07-11T00:36:04.309008513Z" level=info msg="StopPodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\"" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.345 [WARNING][5217] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--ll295-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"c726969c-6763-4115-bad6-191a2dd3a838", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d", Pod:"calico-apiserver-84db954f75-ll295", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7a29fbd44d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.345 [INFO][5217] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.345 [INFO][5217] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" iface="eth0" netns="" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.345 [INFO][5217] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.345 [INFO][5217] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.363 [INFO][5226] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.363 [INFO][5226] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.363 [INFO][5226] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.373 [WARNING][5226] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.373 [INFO][5226] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.374 [INFO][5226] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.378129 env[1218]: 2025-07-11 00:36:04.376 [INFO][5217] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.378129 env[1218]: time="2025-07-11T00:36:04.378085238Z" level=info msg="TearDown network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" successfully" Jul 11 00:36:04.378129 env[1218]: time="2025-07-11T00:36:04.378117159Z" level=info msg="StopPodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" returns successfully" Jul 11 00:36:04.380395 env[1218]: time="2025-07-11T00:36:04.380355089Z" level=info msg="RemovePodSandbox for \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\"" Jul 11 00:36:04.380454 env[1218]: time="2025-07-11T00:36:04.380395890Z" level=info msg="Forcibly stopping sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\"" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.413 [WARNING][5244] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--84db954f75--ll295-eth0", GenerateName:"calico-apiserver-84db954f75-", Namespace:"calico-apiserver", SelfLink:"", UID:"c726969c-6763-4115-bad6-191a2dd3a838", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84db954f75", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e462b120a1f5442ef0bae8fc3ffeb1429af17b4920a48e85a0d7c3e625dea78d", Pod:"calico-apiserver-84db954f75-ll295", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia7a29fbd44d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.414 [INFO][5244] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.414 [INFO][5244] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" iface="eth0" netns="" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.414 [INFO][5244] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.414 [INFO][5244] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.433 [INFO][5253] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.433 [INFO][5253] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.433 [INFO][5253] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.442 [WARNING][5253] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.442 [INFO][5253] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" HandleID="k8s-pod-network.324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Workload="localhost-k8s-calico--apiserver--84db954f75--ll295-eth0" Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.443 [INFO][5253] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.447593 env[1218]: 2025-07-11 00:36:04.445 [INFO][5244] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749" Jul 11 00:36:04.448091 env[1218]: time="2025-07-11T00:36:04.447626773Z" level=info msg="TearDown network for sandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" successfully" Jul 11 00:36:04.450453 env[1218]: time="2025-07-11T00:36:04.450420157Z" level=info msg="RemovePodSandbox \"324fa7c542f9fdd30c4937b9f11dc93ce8f8e58912eb13a0f4df82c4b42ae749\" returns successfully" Jul 11 00:36:04.451034 env[1218]: time="2025-07-11T00:36:04.451006810Z" level=info msg="StopPodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\"" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.489 [WARNING][5272] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6", Pod:"goldmane-768f4c5c69-8xrrm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali293975dfcf9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.489 [INFO][5272] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.489 [INFO][5272] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" iface="eth0" netns="" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.489 [INFO][5272] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.489 [INFO][5272] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.508 [INFO][5281] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.508 [INFO][5281] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.508 [INFO][5281] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.517 [WARNING][5281] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.517 [INFO][5281] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.518 [INFO][5281] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.522700 env[1218]: 2025-07-11 00:36:04.520 [INFO][5272] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.523240 env[1218]: time="2025-07-11T00:36:04.523199086Z" level=info msg="TearDown network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" successfully" Jul 11 00:36:04.523315 env[1218]: time="2025-07-11T00:36:04.523298968Z" level=info msg="StopPodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" returns successfully" Jul 11 00:36:04.529922 env[1218]: time="2025-07-11T00:36:04.527986994Z" level=info msg="RemovePodSandbox for \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\"" Jul 11 00:36:04.529922 env[1218]: time="2025-07-11T00:36:04.528030155Z" level=info msg="Forcibly stopping sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\"" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.564 [WARNING][5299] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"f34c3f6f-9cd6-4fc8-9173-2094547bf9dc", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 35, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee0637517fd7d1256af825a66b05a8ca17606b678237322e3f0328185e4b4fd6", Pod:"goldmane-768f4c5c69-8xrrm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali293975dfcf9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.564 [INFO][5299] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.564 [INFO][5299] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" iface="eth0" netns="" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.564 [INFO][5299] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.564 [INFO][5299] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.582 [INFO][5309] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.582 [INFO][5309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.582 [INFO][5309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.591 [WARNING][5309] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.591 [INFO][5309] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" HandleID="k8s-pod-network.98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Workload="localhost-k8s-goldmane--768f4c5c69--8xrrm-eth0" Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.593 [INFO][5309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:36:04.596249 env[1218]: 2025-07-11 00:36:04.594 [INFO][5299] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6" Jul 11 00:36:04.596656 env[1218]: time="2025-07-11T00:36:04.596282342Z" level=info msg="TearDown network for sandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" successfully" Jul 11 00:36:04.599275 env[1218]: time="2025-07-11T00:36:04.599241809Z" level=info msg="RemovePodSandbox \"98ab51993916e29a1f86fb13d4087528ffb7011633253a2a668de9aa9040d2d6\" returns successfully" Jul 11 00:36:09.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.93:22-10.0.0.1:41414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:09.297661 systemd[1]: Started sshd@12-10.0.0.93:22-10.0.0.1:41414.service. Jul 11 00:36:09.301092 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 11 00:36:09.301169 kernel: audit: type=1130 audit(1752194169.297:1413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.93:22-10.0.0.1:41414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:09.335000 audit[5343]: USER_ACCT pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.336261 sshd[5343]: Accepted publickey for core from 10.0.0.1 port 41414 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:09.337861 sshd[5343]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:09.336000 audit[5343]: CRED_ACQ pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.342124 kernel: audit: type=1101 audit(1752194169.335:1414): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.342197 kernel: audit: type=1103 audit(1752194169.336:1415): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.344144 kernel: audit: type=1006 audit(1752194169.336:1416): pid=5343 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 11 00:36:09.336000 audit[5343]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc08782f0 a2=3 a3=1 items=0 ppid=1 pid=5343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:09.347826 kernel: audit: type=1300 audit(1752194169.336:1416): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc08782f0 a2=3 a3=1 items=0 ppid=1 pid=5343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:09.336000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:09.350379 systemd-logind[1205]: New session 13 of user core. Jul 11 00:36:09.351230 systemd[1]: Started session-13.scope. Jul 11 00:36:09.351813 kernel: audit: type=1327 audit(1752194169.336:1416): proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:09.353000 audit[5343]: USER_START pid=5343 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.357000 audit[5345]: CRED_ACQ pid=5345 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.361566 kernel: audit: type=1105 audit(1752194169.353:1417): pid=5343 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.361615 kernel: audit: type=1103 audit(1752194169.357:1418): pid=5345 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.474967 sshd[5343]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:09.475000 audit[5343]: USER_END pid=5343 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.479887 systemd[1]: sshd@12-10.0.0.93:22-10.0.0.1:41414.service: Deactivated successfully. Jul 11 00:36:09.475000 audit[5343]: CRED_DISP pid=5343 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.482988 kernel: audit: type=1106 audit(1752194169.475:1419): pid=5343 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.483047 kernel: audit: type=1104 audit(1752194169.475:1420): pid=5343 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:09.480765 systemd[1]: session-13.scope: Deactivated successfully. Jul 11 00:36:09.481305 systemd-logind[1205]: Session 13 logged out. Waiting for processes to exit. Jul 11 00:36:09.481929 systemd-logind[1205]: Removed session 13. Jul 11 00:36:09.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.93:22-10.0.0.1:41414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:09.970000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:09.970000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003265c20 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:36:09.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:36:09.971000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:09.971000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003265c40 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:36:09.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:36:09.972000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:09.972000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003109060 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:36:09.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:36:09.972000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:36:09.972000 audit[1817]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003109080 a2=fc6 a3=0 items=0 ppid=1666 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c221 key=(null) Jul 11 00:36:09.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:36:11.404349 systemd[1]: run-containerd-runc-k8s.io-f4d2daa43340e7600a460aabad9f9cc38c37d2928c4ef3cd7abbeec5d67bbebd-runc.ZAjCl5.mount: Deactivated successfully. Jul 11 00:36:14.479726 systemd[1]: Started sshd@13-10.0.0.93:22-10.0.0.1:46748.service. Jul 11 00:36:14.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.93:22-10.0.0.1:46748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:14.481067 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 11 00:36:14.481126 kernel: audit: type=1130 audit(1752194174.479:1426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.93:22-10.0.0.1:46748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:14.519000 audit[5387]: USER_ACCT pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.520023 sshd[5387]: Accepted publickey for core from 10.0.0.1 port 46748 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:14.521523 sshd[5387]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:14.520000 audit[5387]: CRED_ACQ pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.525880 kernel: audit: type=1101 audit(1752194174.519:1427): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.525955 kernel: audit: type=1103 audit(1752194174.520:1428): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.525980 kernel: audit: type=1006 audit(1752194174.520:1429): pid=5387 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 11 00:36:14.520000 audit[5387]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf18cfa0 a2=3 a3=1 items=0 ppid=1 pid=5387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:14.530823 kernel: audit: type=1300 audit(1752194174.520:1429): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf18cfa0 a2=3 a3=1 items=0 ppid=1 pid=5387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:14.520000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:14.531988 kernel: audit: type=1327 audit(1752194174.520:1429): proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:14.534099 systemd-logind[1205]: New session 14 of user core. Jul 11 00:36:14.534999 systemd[1]: Started session-14.scope. Jul 11 00:36:14.537000 audit[5387]: USER_START pid=5387 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.538000 audit[5389]: CRED_ACQ pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.544507 kernel: audit: type=1105 audit(1752194174.537:1430): pid=5387 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.544548 kernel: audit: type=1103 audit(1752194174.538:1431): pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.651112 sshd[5387]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:14.652000 audit[5387]: USER_END pid=5387 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.655373 systemd[1]: Started sshd@14-10.0.0.93:22-10.0.0.1:46752.service. Jul 11 00:36:14.656030 systemd[1]: sshd@13-10.0.0.93:22-10.0.0.1:46748.service: Deactivated successfully. Jul 11 00:36:14.652000 audit[5387]: CRED_DISP pid=5387 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.656952 systemd[1]: session-14.scope: Deactivated successfully. Jul 11 00:36:14.658199 systemd-logind[1205]: Session 14 logged out. Waiting for processes to exit. Jul 11 00:36:14.659030 systemd-logind[1205]: Removed session 14. Jul 11 00:36:14.659313 kernel: audit: type=1106 audit(1752194174.652:1432): pid=5387 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.659357 kernel: audit: type=1104 audit(1752194174.652:1433): pid=5387 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.93:22-10.0.0.1:46752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:14.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.93:22-10.0.0.1:46748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:14.695000 audit[5400]: USER_ACCT pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.696116 sshd[5400]: Accepted publickey for core from 10.0.0.1 port 46752 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:14.696000 audit[5400]: CRED_ACQ pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.696000 audit[5400]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded676d0 a2=3 a3=1 items=0 ppid=1 pid=5400 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:14.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:14.697709 sshd[5400]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:14.700913 systemd-logind[1205]: New session 15 of user core. Jul 11 00:36:14.702088 systemd[1]: Started session-15.scope. Jul 11 00:36:14.704000 audit[5400]: USER_START pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.705000 audit[5403]: CRED_ACQ pid=5403 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.929492 sshd[5400]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:14.929000 audit[5400]: USER_END pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.929000 audit[5400]: CRED_DISP pid=5400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.933765 systemd[1]: Started sshd@15-10.0.0.93:22-10.0.0.1:46754.service. Jul 11 00:36:14.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.93:22-10.0.0.1:46754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:14.934483 systemd[1]: sshd@14-10.0.0.93:22-10.0.0.1:46752.service: Deactivated successfully. Jul 11 00:36:14.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.93:22-10.0.0.1:46752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:14.935833 systemd[1]: session-15.scope: Deactivated successfully. Jul 11 00:36:14.936712 systemd-logind[1205]: Session 15 logged out. Waiting for processes to exit. Jul 11 00:36:14.937516 systemd-logind[1205]: Removed session 15. Jul 11 00:36:14.974000 audit[5411]: USER_ACCT pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.975865 sshd[5411]: Accepted publickey for core from 10.0.0.1 port 46754 ssh2: RSA SHA256:kAw98lsrYCxXKwzslBlKMy3//X0GU8J77htUo5WbMYE Jul 11 00:36:14.975000 audit[5411]: CRED_ACQ pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.975000 audit[5411]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4cda610 a2=3 a3=1 items=0 ppid=1 pid=5411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:36:14.975000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:36:14.977012 sshd[5411]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:36:14.980803 systemd-logind[1205]: New session 16 of user core. Jul 11 00:36:14.981484 systemd[1]: Started session-16.scope. Jul 11 00:36:14.983000 audit[5411]: USER_START pid=5411 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:14.985000 audit[5414]: CRED_ACQ pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:17.204786 sshd[5411]: pam_unix(sshd:session): session closed for user core Jul 11 00:36:17.204000 audit[5411]: USER_END pid=5411 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:17.204000 audit[5411]: CRED_DISP pid=5411 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:36:17.207323 systemd-logind[1205]: Session 16 logged out. Waiting for processes to exit. Jul 11 00:36:17.207550 systemd[1]: sshd@15-10.0.0.93:22-10.0.0.1:46754.service: Deactivated successfully. Jul 11 00:36:17.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.93:22-10.0.0.1:46754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:36:17.208397 systemd[1]: session-16.scope: Deactivated successfully. Jul 11 00:36:17.209111 systemd-logind[1205]: Removed session 16. Jul 11 00:36:18.246164 kubelet[1950]: E0711 00:36:18.246127 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"